What’s Vulnerable › Products

miniOrange OAuth Single Sign On – SSO (OAuth Client) vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your miniOrange OAuth Single Sign On – SSO (OAuth Client) version is affected

Latest miniOrange OAuth Single Sign On – SSO (OAuth Client) vulnerabilities

• CVE-2026-97274 — WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability (CVSS 9.8)
• CVE-2026-82183 — OAuth Single Sign On 6.25.0 - 7.0.0 - Unauthenticated Account Takeover via Unverified Steam OpenID Assertion (CVSS 8.1)
• CVE-2026-28008 — WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability (CVSS 9.8)
• CVE-2022-34155 — WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication (CVSS 8.8)
• CVE-2023-1093 — OAuth Single Sign On - SSO (OAuth Client) < 6.24.2 - IdP Discard via CSRF (CVSS 6.5)
• CVE-2023-1092 — OAuth Single Sign On - SSO (OAuth Client) - IdP Deletion via CSRF (CVSS 6.5)
• CVE-2022-2133 — OAuth Single Sign On < 6.22.6 - Authentication Bypass (CVSS 5.3)