Aller au contenu
Se connecter
6.5 Moyenne

CVE-2023-1093 The OAuth Single Sign On WordPress plugin before 6.24.2 does not have CSRF checks when discarding Identify providers…

Description

The OAuth Single Sign On WordPress plugin before 6.24.2 does not have CSRF checks when discarding Identify providers (IdP), which could allow attackers to make logged in admins delete all IdP via a CSRF attack

Produits et versions touchés

Produit Versions touchées Corrigé en
OAuth Single Sign On 6.24 premières → < 6.24.2 6.24.2

Autres CVE de OAuth Single Sign On

Les 2 CVE de OAuth Single Sign On →
CVE-2026-82183 The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam… 8.1 Élevée
Suivre cette CVE