← CVE Intelligence

CVE-2022-2133

OAuth Single Sign On < 6.22.6 - Authentication Bypass PUBLISHED

Description (CNA)

The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user's email address.

Affected (CNA)

Vendor / productVersions
Unknown / OAuth Single Sign On – SSO (OAuth Client)affected 6.22.6 before 6.22.6

CWE

CWE-287

References

ADP enrichment

CVE

No English description supplied.