https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 19:33:23 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-286266 EUVD-2026-286266 https://cve.radiocsirt.org/vuln/euvd-2026-286266 https://cve.radiocsirt.org/vuln/fkie_cve-2025-10753 <p>The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 6.26.14. This is due to missing capability checks and authentication verification on the OAuth redirect functionality accessible via the &#39;oauthredirect&#39; option parameter. This makes it possible for unauthenticated attackers to set the global redirect URL option via the redirect_url parameter granted they can access the site directly.</p> <p>The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 6.26.14. This is due to missing capability checks and authentication verification on the OAuth redirect functionality accessible via the &#39;oauthredirect&#39; option parameter. This makes it possible for unauthenticated attackers to set the global redirect URL option via the redirect_url parameter granted they can access the site directly.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-10753 https://cve.radiocsirt.org/vuln/ghsa-rhc6-ccw5-jw98 <p>The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 6.26.14. This is due to missing capability checks and authentication verification on the OAuth redirect functionality accessible via the &#39;oauthredirect&#39; option parameter. This makes it possible for unauthenticated attackers to set the global redirect URL option via the redirect_url parameter granted they can access the site directly.</p> <p>The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 6.26.14. This is due to missing capability checks and authentication verification on the OAuth redirect functionality accessible via the &#39;oauthredirect&#39; option parameter. This makes it possible for unauthenticated attackers to set the global redirect URL option via the redirect_url parameter granted they can access the site directly.</p> https://cve.radiocsirt.org/vuln/ghsa-rhc6-ccw5-jw98