Vulnerabilities / OAuth Single Sign On – SSO (OAuth Client)
OAuth Single Sign On – SSO (OAuth Client) vulnerabilities
Advisories WPSec published for OAuth Single Sign On – SSO (OAuth Client). Other sources may list more. Its attack surface: OAuth Single Sign On – SSO (OAuth Client) on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-03 | WPSEC-2026-2247 | OAuth Single Sign On – SSO (OAuth Client) <= 7.1.3 - Unauthenticated Authentication Bypass to Account Takeover via SSO Login for Accounts with Empty Email | High 8.1 | 7.1.4 |
License: CC BY 4.0