CVE-2022-2083
Simple Single Sign On <= 4.1.0 - Authentication Bypass
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
05 Sep 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Simple Single Sign On WordPress plugin through 4.1.0 leaks its OAuth client_secret, which could be used by attackers to gain unauthorized access to the site.
Affected products
Unknown · Simple Single Sign On