CVE-2022-2133 — OAuth Single Sign On < 6.22.6 - Authentication Bypass
The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the on…
Published: 2022-07-17 · CVSS: Unscored
The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user's email address.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7