The Simple Single Sign On WordPress plugin through 4.1.0 leaks its OAuth client_secret, which could be used by attackers to gain unauthorized access to the site.
References
| Link | Resource |
|---|---|
| https://lana.codes/lanavdb/0bab7575-45fc-432d-945e-6100c35c574c/ | Exploit Third Party Advisory |
| https://wpscan.com/vulnerability/2bbfc855-6901-462f-8a93-120d7fb5d268 | Exploit Third Party Advisory |
| https://lana.codes/lanavdb/0bab7575-45fc-432d-945e-6100c35c574c/ | Exploit Third Party Advisory |
| https://wpscan.com/vulnerability/2bbfc855-6901-462f-8a93-120d7fb5d268 | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 07:00
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://lana.codes/lanavdb/0bab7575-45fc-432d-945e-6100c35c574c/ - Exploit, Third Party Advisory | |
| References | () https://wpscan.com/vulnerability/2bbfc855-6901-462f-8a93-120d7fb5d268 - Exploit, Third Party Advisory |
24 Jul 2023, 13:07
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-319 |
08 Sep 2022, 15:03
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CPE | cpe:2.3:a:simple_sign_on_project:simple_sign_on:*:*:*:*:*:wordpress:*:* | |
| References | (MISC) https://lana.codes/lanavdb/0bab7575-45fc-432d-945e-6100c35c574c/ - Exploit, Third Party Advisory | |
| References | (MISC) https://wpscan.com/vulnerability/2bbfc855-6901-462f-8a93-120d7fb5d268 - Exploit, Third Party Advisory | |
| CWE | CWE-326 |
06 Sep 2022, 04:07
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-09-05 13:15
Updated : 2024-11-21 07:00
NVD link : CVE-2022-2083
Mitre link : CVE-2022-2083
CVE.ORG link : CVE-2022-2083
JSON object : View
Products Affected
simple_sign_on_project
- simple_sign_on
CWE
CWE-319
Cleartext Transmission of Sensitive Information