Advisories · Technology
miniOrange OAuth Single Sign On – SSO (OAuth Client).
Every CVE that names miniOrange OAuth Single Sign On – SSO (OAuth Client) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.3 - Privilege Escalation vulnerability
- miniOrange OAuth Single Sign On – SSO (OAuth Client)
- Privilege escalation
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability
- miniOrange OAuth Single Sign On – SSO (OAuth Client)
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability
- miniOrange OAuth Single Sign On – SSO (OAuth Client)
- Authentication bypass
- CVSS 8.8 High
WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication
- miniOrange OAuth Single Sign On – SSO (OAuth Client)
- Authentication bypass