Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-2083

Simple Single Sign On <= 4.1.0 - Authentication Bypass

Description

The Simple Single Sign On WordPress plugin through 4.1.0 leaks its OAuth client_secret, which could be used by attackers to gain unauthorized access to the site.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Simple Single Sign On

Default version status: affected

  • 0 to ≤ 4.1.0affected

References