OAuth Bypass in WordPress Steam SSO Plugin

Executive Summary

The OAuth Single Sign On WordPress plugin before version 7.0.1 has a flaw in its Steam single sign-on flow where it does not verify the identity assertion returned by Steam. This allows unauthenticated attackers to log in as any non-administrator user or create new accounts without authentication.

Useful 0 Not Useful 0

Detection Guidance

Check the installed version of the OAuth Single Sign On WordPress plugin. If it is between 6.25.0 and 7.0.0, the system is vulnerable. Logs may show unauthorized login attempts or new account creations without prior authentication.

Useful 0 Not Useful 0

Impact Analysis

Attackers can exploit this to gain unauthorized access to user accounts or create new accounts, potentially leading to data breaches, unauthorized actions, or further compromise of the WordPress site. The vulnerability is classified as an authentication bypass with high severity.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive user data, violating compliance requirements under GDPR, HIPAA, or other regulations that mandate strict access controls and authentication mechanisms.

Useful 0 Not Useful 0

Mitigation Strategies

Update the OAuth Single Sign On plugin to version 7.0.1 or later immediately. Disable the Steam single sign-on flow temporarily if an update is not possible. Monitor for suspicious account activity or unauthorized logins.

Useful 0 Not Useful 0