CVE-2025-10753

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-10753", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-09-19T20:41:51.812Z", "datePublished": "2026-02-06T06:46:30.162Z", "dateUpdated": "2026-04-08T17:09:14.056Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:09:14.056Z"}, "affected": [{"vendor": "cyberlord92", "product": "OAuth Single Sign On \u2013 SSO (OAuth Client)", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "6.26.14", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The OAuth Single Sign On \u2013 SSO (OAuth Client) plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 6.26.14. This is due to missing capability checks and authentication verification on the OAuth redirect functionality accessible via the 'oauthredirect' option parameter. This makes it possible for unauthenticated attackers to set the global redirect URL option via the redirect_url parameter granted they can access the site directly."}], "title": "OAuth Single Sign On \u2013 SSO (OAuth Client) <= 6.26.14 - Missing Authorization", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/915e1a6e-ad9c-4849-8ae0-3ded18720a1f?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/miniorange-login-with-eve-online-google-facebook/tags/6.26.12/class-mooauth-widget.php#L260"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3399223%40miniorange-login-with-eve-online-google-facebook&new=3399223%40miniorange-login-with-eve-online-google-facebook&sfp_email=&sfph_mail="}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-862 Missing Authorization", "cweId": "CWE-862", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Jonas Benjamin Friedli"}], "timeline": [{"time": "2025-11-17T19:14:30.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2026-02-05T18:30:28.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-06T19:24:17.800081Z", "id": "CVE-2025-10753", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-06T19:24:43.451Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-10753", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-06T19:24:17.800081Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-06T19:24:40.455Z"}}], "cna": {"title": "OAuth Single Sign On \u2013 SSO (OAuth Client) <= 6.26.14 - Missing Authorization", "credits": [{"lang": "en", "type": "finder", "value": "Jonas Benjamin Friedli"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}}], "affected": [{"vendor": "cyberlord92", "product": "OAuth Single Sign On \u2013 SSO (OAuth Client)", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "6.26.14"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-11-17T19:14:30.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2026-02-05T18:30:28.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/915e1a6e-ad9c-4849-8ae0-3ded18720a1f?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/miniorange-login-with-eve-online-google-facebook/tags/6.26.12/class-mooauth-widget.php#L260"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3399223%40miniorange-login-with-eve-online-google-facebook&new=3399223%40miniorange-login-with-eve-online-google-facebook&sfp_email=&sfph_mail="}], "descriptions": [{"lang": "en", "value": "The OAuth Single Sign On \u2013 SSO (OAuth Client) plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 6.26.14. This is due to missing capability checks and authentication verification on the OAuth redirect functionality accessible via the 'oauthredirect' option parameter. This makes it possible for unauthenticated attackers to set the global redirect URL option via the redirect_url parameter granted they can access the site directly."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:09:14.056Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10753", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:09:14.056Z", "dateReserved": "2025-09-19T20:41:51.812Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2026-02-06T06:46:30.162Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "OAuth Single Sign On \u2013 SSO (OAuth Client)", "vendor": "cyberlord92", "versions": [{"lessThanOrEqual": "6.26.14", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The OAuth Single Sign On \u2013 SSO (OAuth Client) plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 6.26.14. This is due to missing capability checks and authentication verification on the OAuth redirect functionality accessible via the 'oauthredirect' option parameter. This makes it possible for unauthenticated attackers to set the global redirect URL option via the redirect_url parameter granted they can access the site directly."}, {"lang": "es", "value": "El plugin OAuth Single Sign On \u2013 SSO (cliente OAuth) para WordPress es vulnerable a acceso no autorizado en todas las versiones hasta e incluyendo la 6.26.14. Esto se debe a la falta de comprobaciones de capacidad y verificaci\u00f3n de autenticaci\u00f3n en la funcionalidad de redirecci\u00f3n OAuth accesible a trav\u00e9s del par\u00e1metro de opci\u00f3n 'oauthredirect'. Esto hace posible que atacantes no autenticados establezcan la opci\u00f3n de URL de redirecci\u00f3n global a trav\u00e9s del par\u00e1metro redirect_url siempre que puedan acceder al sitio directamente."}], "id": "CVE-2025-10753", "lastModified": "2026-06-17T08:28:54.907", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10753", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-06T19:24:17.800081Z", "version": "2.0.3"}}]}, "published": "2026-02-06T07:16:10.940", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/miniorange-login-with-eve-online-google-facebook/tags/6.26.12/class-mooauth-widget.php#L260"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3399223%40miniorange-login-with-eve-online-google-facebook&new=3399223%40miniorange-login-with-eve-online-google-facebook&sfp_email=&sfph_mail="}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/915e1a6e-ad9c-4849-8ae0-3ded18720a1f?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T13:50:10.142456+00:00", "value": {"mitigation_remediation": ["Check the vendor\u2019s official channel or the WordPress plugin repository for an updated version that addresses this vulnerability, and install it if available.", "If an update is not immediately available, restrict direct access to the oauthredirect endpoint using firewall rules or a web\u2011application\u2011firewall to block unauthenticated requests.", "As a temporary workaround, disable the OAuth redirect functionality by removing the redirect_url option from the plugin settings or deleting the option from the WordPress options table until a patch is applied."], "summary": {"action": "Immediate Patch", "impact": "Unauthorized Access via Unchecked Redirect URL"}, "threat_synthesis": {"affected_systems": "The vulnerability impacts the WordPress plugin OAuth Single Sign On \u2013 SSO (OAuth Client) from the vendor cyberlord92. All released builds through and including version 6.26.14 are affected. Site owners running any of these versions should verify that their redirect settings have not been altered.", "description_and_impact": "The OAuth Single Sign On \u2013 SSO (OAuth Client) plugin for WordPress operates its OAuth redirect endpoint without performing necessary capability checks. An attacker who can send HTTP requests to the site can supply a malicious redirect_url parameter, allowing the attacker to modify the global redirect URL in the database. This change can redirect legitimate users to attacker\u2011controlled sites, facilitating phishing or credential theft and compromising user account integrity and confidentiality.", "risk_and_exploitability": "The CVSS score of 5.3 reflects moderate severity, while the EPSS score of less than 1% indicates a low likelihood of exploitation at present. The vulnerability is not listed in CISA's KEV catalog. Attackers can exploit the flaw by sending unauthenticated HTTP requests to the site\u2019s OAuth redirect handler, making the attack vector straightforward and not requiring user credentials. Once the global redirect URL is modified, subsequent authenticated logins may be redirected to malicious destinations."}}}}, "created": "2026-02-09T10:52:27.006421+00:00", "updated": "2026-04-22T14:00:18.228218+00:00", "vendors": ["cyberlord92", "cyberlord92$PRODUCT$oauth_single_sign_on_\u2013_sso_(oauth_client)", "wordpress", "wordpress$PRODUCT$wordpress"]}