oauth client single sign on vulnerabilities and fixes
Recent CVEs affecting oauth client single sign on, with upgrade or downgrade steps. 1 tracked.
Also searched as: oauthclientsinglesignon.
oauth client single sign on has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-09-26. Highest priority: CVE-2022-3119 (score 46/100).
- CVE-2022-3119 HIGH 7.5 UPGRADE The OAuth client Single Sign On WordPress plugin before 3.0.4 does not have authorisation and CSRF when updati
FAQ
How do I fix oauth client single sign on vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is oauth client single sign on being exploited right now?
None of the tracked oauth client single sign on CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which oauth client single sign on CVE should I patch first?
CVE-2022-3119 currently ranks highest (46/100): The OAuth client Single Sign On WordPress plugin before 3.0.4 does not have authorisation and CSRF when updati.