CVE-2016-10928

Published August 22nd, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

5

MEDIUM

Affected

1

PROJECT

Description

The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users.

SAML-Toolkits/wordpress-saml

OneLogin SAML plugin for Wordpress

GitHub

73