~/products/miniorange/oauth_single_sign_on_enterprise

pipeline liveDigest Docs

Miniorange Oauth Single Sign On Enterprise vulnerabilities

1 known vulnerability affecting miniorange/oauth_single_sign_on_enterprise.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

SortPage 1 of 1

CVE-2023-1092P4MEDIUMCVSS 6.5fixed in 48.4.92023-03-27

CVE-2023-1092 [MEDIUM] CWE-352 CVE-2023-1092: The OAuth Single Sign On Free WordPress plugin before 6.24.2, OAuth Single Sign On Standard WordPres The OAuth Single Sign On Free WordPress plugin before 6.24.2, OAuth Single Sign On Standard WordPress plugin before 28.4.9, OAuth Single Sign On Premium WordPress plugin before 38.4.9 and OAuth Single Sign On Enterprise WordPress plugin before 48.4.9 do not have CSRF checks when deleting Identity Providers (IdP), which could allow attackers to make lo

Miniorange Oauth Single Sign On Enterprise vulnerabilities | cvebase