Security Advisory
CVE-2026-82183
8.1
HIGH
Vulnerability Description
The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts.
Published Date
September 2, 2026
Official Source
NIST NVD Advisory