CVE-2023-1093

Name of the Vulnerable Software and Affected Versions OAuth Single Sign On WordPress plugin versions prior to 6.24.2

Description The issue concerns a lack of CSRF checks when discarding Identify providers (IdP) in the OAuth Single Sign On WordPress plugin. This could allow attackers to make logged-in admins delete all IdP via a CSRF attack.

Recommendations For versions prior to 6.24.2, update to version 6.24.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the IdP discard functionality to minimize the risk of exploitation.