Simple Sign On Project: Security Vulnerabilities
The Simple Single Sign On WordPress plugin through 4.1.0 leaks its OAuth client_secret, which could be used by attackers to gain unauthorized access to the site.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-09-05