Product by miniOrange

    Wp Oauth Server

    3 known vulnerabilities in Wp Oauth Server (miniOrange), 0 of them actively exploited (CISA KEV).

    Key figures

    3

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Wp Oauth Server (miniOrange)
    CriticalCVE-2022-34149

    WordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerability

    9.8
    CriticalCVE-2026-65520

    WordPress WP OAuth Server plugin <= 6.2.0 - SQL Injection vulnerability

    9.3
    MediumCVE-2026-107433

    WordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerability

    6.5

    All products by miniOrange