title: Simple Single Sign On <= 4.1.0 - Authentication Bypass
description: The Simple Single Sign On WordPress plugin through 4.1.0 leaks its OAuth client_secret, which could be used by attackers to gain unauthorized access to the site.
problem types: CWE-319 Cleartext Transmission of Sensitive Information
affected:
{
vendor: Unknown
product: Simple Single Sign On
versions:
status: affected, versionType: custom, version: 0, lessThanOrEqual: 4.1.0
defaultStatus: affected
collectionURL: https://wordpress.org/plugins
}