NetSight
high7.5

CVE-2022-2083

The Simple Single Sign On WordPress plugin through 4.1.0 leaks its OAuth client_secret, which could be used by attackers to gain unauthorized access to the sit…

Impact

The Simple Single Sign On WordPress plugin through 4.1.0 leaks its OAuth client_secret, which could be used by attackers to gain unauthorized access to the site.

Affected products

VendorProductAffected versions
Simple Sign On ProjectSimple Sign On
through 4.1.0

Weakness classification

References