CVE-2022-2083: Simple Sign On Project Simple Sign On

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

The Simple Single Sign On WordPress plugin through 4.1.0 leaks its OAuth client_secret, which could be used by attackers to gain unauthorized access to the site.

Affected products

• Simple Sign On Project Simple Sign On: up to and including 4.1.0

Published 2022-09-05. Last modified 2026-06-17.