VendorsminiOrangeoauth_single_sign_onall versions
Vulnerabilities

miniOrange OAuth Single Sign On

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2022-34155
WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication
Published 2023-07-18 · Modified
8.8EPSS 0.010
CVE-2023-1092
OAuth Single Sign On - SSO (OAuth Client) - IdP Deletion via CSRF
Published 2023-03-27 · Modified
6.5EPSS 0.004
CVE-2023-1093
OAuth Single Sign On - SSO (OAuth Client) < 6.24.2 - IdP Discard via CSRF
Published 2023-03-27 · Modified
6.5EPSS 0.003
CVE-2022-2133
OAuth Single Sign On < 6.22.6 - Authentication Bypass
Published 2022-07-17 · Modified
5.3EPSS 0.012