OAuth Single Sign On - SSO (OAuth Client) Standard < 28.4.9 - IdP Deletion via CSRF

2023-02-2800:00:00

Nguyen Thuc Tuyen

wpscan.com

oauth single sign on

sso

identity providers

csrf

attackers

plugin vulnerability

EPSS

0.001

Percentile

47.5%

JSON

The plugin does not have CSRF checks when deleting Identity Providers (IdP), which could allow attackers to make logged in admins delete arbitrary IdP via a CSRF attack

PoC

https://example.com/wp-admin/admin.php?page=mo_oauth_settings&tab;=config&action;=delete&app;=wordpress

EPSS

0.001

Percentile

47.5%

JSON

Related for WPVDB-ID:5EB85DF5-8AAB-4F30-A401-F776A310B09C