WordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure
The WordPress Single Sign-On (SSO) plugin for WordPress is vulnerable to unauthorized access due to a misconfigured capability check on a function in all versions up to, and including, the *.5.3 versions of the plugin. This makes it possible for unauthenticated attackers to extract sensitive data including site content that has been restricted to certain users and/or roles.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
WordPress Single Sign-On (SSO) - Single Site Standard
Vendor
cyberlord92
Product
WordPress Single Sign-On (SSO) - Single Site Standard
Platforms
Unknown
Default status
unaffected
WordPress Single Sign-On (SSO) - Single Site Standard · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
18.5.3
None listed
WordPress Single Sign-On (SSO) - Single Site Premium
Vendor
cyberlord92
Product
WordPress Single Sign-On (SSO) - Single Site Premium
Platforms
Unknown
Default status
unaffected
WordPress Single Sign-On (SSO) - Single Site Premium · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
28.5.3
None listed
WordPress Single Sign-On (SSO) - Multisite Premium
Vendor
cyberlord92
Product
WordPress Single Sign-On (SSO) - Multisite Premium
Platforms
Unknown
Default status
unaffected
WordPress Single Sign-On (SSO) - Multisite Premium · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
30.5.3
None listed
WordPress Single Sign-On (SSO) - Single Site Enterprise
Vendor
cyberlord92
Product
WordPress Single Sign-On (SSO) - Single Site Enterprise
Platforms
Unknown
Default status
unaffected
WordPress Single Sign-On (SSO) - Single Site Enterprise · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
38.5.3
None listed
WordPress Single Sign-On (SSO) - Multisite Enterprise
Vendor
cyberlord92
Product
WordPress Single Sign-On (SSO) - Multisite Enterprise
Platforms
Unknown
Default status
unaffected
WordPress Single Sign-On (SSO) - Multisite Enterprise · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
40.5.3
None listed
WordPress Single Sign-On (SSO) - Single Site All-Inclusive
Vendor
cyberlord92
Product
WordPress Single Sign-On (SSO) - Single Site All-Inclusive
Platforms
Unknown
Default status
unaffected
WordPress Single Sign-On (SSO) - Single Site All-Inclusive · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
Unavailable
48.5.3
None listed
WordPress Single Sign-On (SSO) - Multisite All-Inclusive
Vendor
cyberlord92
Product
WordPress Single Sign-On (SSO) - Multisite All-Inclusive
Platforms
Unknown
Default status
unaffected
WordPress Single Sign-On (SSO) - Multisite All-Inclusive · Scoped product and version facts