Description
The WordPress Single Sign-On (SSO) plugin for WordPress is vulnerable to unauthorized access due to a misconfigured capability check on a function in all versions up to, and including, the *.5.3 versions of the plugin. This makes it possible for unauthenticated attackers to extract sensitive data including site content that has been restricted to certain users and/or roles.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
cyberlord92 WordPress Single Sign-On (SSO) - Single Site Standard
Default version status: unaffected
0 to ≤ 18.5.3affected
cyberlord92 WordPress Single Sign-On (SSO) - Single Site Premium
Default version status: unaffected
0 to ≤ 28.5.3affected
cyberlord92 WordPress Single Sign-On (SSO) - Multisite Premium
Default version status: unaffected
0 to ≤ 30.5.3affected
cyberlord92 WordPress Single Sign-On (SSO) - Single Site Enterprise
Default version status: unaffected
0 to ≤ 38.5.3affected
cyberlord92 WordPress Single Sign-On (SSO) - Multisite Enterprise
Default version status: unaffected
0 to ≤ 40.5.3affected
cyberlord92 WordPress Single Sign-On (SSO) - Single Site All-Inclusive
Default version status: unaffected
0 to ≤ 48.5.3affected
cyberlord92 WordPress Single Sign-On (SSO) - Multisite All-Inclusive
Default version status: unaffected
0 to ≤ 50.5.3affected