Skip to content
Fencer Vulns
medium 6.5

CVE-2023-1092 json

OAuth Single Sign On - SSO (OAuth Client) - IdP Deletion via CSRF

published 2023-03-27 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-23379

cvss
6.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 38%
public exploits
0
none known

Summary

The OAuth Single Sign On Free WordPress plugin before 6.24.2, OAuth Single Sign On Standard WordPress plugin before 28.4.9, OAuth Single Sign On Premium WordPress plugin before 38.4.9 and OAuth Single Sign On Enterprise WordPress plugin before 48.4.9 do not have CSRF checks when deleting Identity Providers (IdP), which could allow attackers to make logged in admins delete arbitrary IdP via a CSRF attack

Patch / fix

  • MiniOrange OAuth Single Sign On Free 6.24.2
  • MiniOrange OAuth Single Sign On Standard 28.4.9
  • MiniOrange OAuth Single Sign On Premium 38.4.9
  • MiniOrange OAuth Single Sign On Enterprise 48.4.9

CISA SSVC

Exploitation
Proof of concept is public
Automatable
no
Technical impact
partial
Assessed
20 mo ago

Exploit prediction

0.44% chance of exploitation in the next 30 days, higher than 38% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • wpscan.com https://wpscan.com/vulnerability/8fbf7efe-0bf2-42c6-aef1-7fcf2708b31b referenced PoC, tagged "exploit" by a source, unverified
  • wpscan.com https://wpscan.com/vulnerability/f6e165d9-2193-4c76-ae2d-618a739fe4fb referenced PoC, tagged "exploit" by a source, unverified
  • wpscan.com https://wpscan.com/vulnerability/52e29f16-b6dd-4132-9bb8-ad10bd3c39d7 referenced PoC, tagged "exploit" by a source, unverified
  • wpscan.com https://wpscan.com/vulnerability/5eb85df5-8aab-4f30-a401-f776a310b09c referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CISA ADP 3.1 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
NVD 3.1 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CNA 3.1 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

  • MiniOrange OAuth Single Sign On Free
  • MiniOrange OAuth Single Sign On Standard
  • MiniOrange OAuth Single Sign On Premium
  • MiniOrange OAuth Single Sign On Enterprise

Classification

Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.