Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 6.26.14. This is due to missing capability checks and authentication verification on the OAuth redirect functionality accessible via the 'oauthredirect' option parameter. This makes it possible for unauthenticated attackers to set the global redirect URL option via the redirect_url parameter granted they can access the site directly.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2025-10753 The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 6.26.14. This is due to … https://www.cve.org/CVERecord?id=CVE-2025-10753
Post summary
The WordPress OAuth Single Sign On plugin versions up to 6.26.14 are vulnerable to unauthorized access, as documented in CVE-2025-10753.
CVE-2025-10753 OAuth SSO WordPress Plugin Unauthenticated Redirect URL Modification Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-10753
Post summary
The text announces CVE-2025-10753, describing it as an unauthenticated redirect URL modification vulnerability in the OAuth SSO WordPress Plugin, but provides no additional technical, exploit, or patch information.