Description (CNA)
The WordPress Single Sign-On (SSO) plugin for WordPress is vulnerable to unauthorized access due to a misconfigured capability check on a function in all versions up to, and including, the *.5.3 versions of the plugin. This makes it possible for unauthenticated attackers to extract sensitive data including site content that has been restricted to certain users and/or roles.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| cyberlord92 / WordPress Single Sign-On (SSO) - Single Site Standard | affected 0 through 18.5.3 |
| cyberlord92 / WordPress Single Sign-On (SSO) - Single Site Premium | affected 0 through 28.5.3 |
| cyberlord92 / WordPress Single Sign-On (SSO) - Multisite Premium | affected 0 through 30.5.3 |
| cyberlord92 / WordPress Single Sign-On (SSO) - Single Site Enterprise | affected 0 through 38.5.3 |
| cyberlord92 / WordPress Single Sign-On (SSO) - Multisite Enterprise | affected 0 through 40.5.3 |
| cyberlord92 / WordPress Single Sign-On (SSO) - Single Site All-Inclusive | affected 0 through 48.5.3 |
| cyberlord92 / WordPress Single Sign-On (SSO) - Multisite All-Inclusive | affected 0 through 50.5.3 |
CWE
CWE-863
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/51aa5531-e5b3-4c47-8d06-58eac6dd92fb?source=cve
- https://plugins.miniorange.com/wordpress-sso
ADP enrichment
No English description supplied.
No references supplied.