CVE-2022-2133

CVE-2022-2133: OAuth Single Sign On < 6.22.6 - Authentication Bypass

Vendor Unknown
Product OAuth Single Sign On – SSO (OAuth Client)
Weakness CWE-287 · Improper authentication
Published July 17, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user's email address.

Key dates

02Disclosure timeline

July 17, 2022 CVE published
August 3, 2024 Record updated