Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-2133
HistoryJul 17, 2022 - 11:15 a.m.

Design/Logic Flaw

2022-07-1711:15:00
PRIOn knowledge base
www.prio-n.com
4

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.2%

The OAuth Single Sign On WordPress plugin before 6.22.6 doesn’t validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user’s email address.

CPENameOperatorVersion
oauth_single_sign_onlt6.22.6

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.2%