Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-107433 2 Miniorange, Wordpress-extensions 2 Wp Oauth Server, Wp Oauth Server 2026-10-24 6.5 Medium
Missing Authorization vulnerability in miniOrange WP OAuth Server miniorange-oauth-20-server allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP OAuth Server: from n/a through 6.4.0.
CVE-2026-65520 2 Miniorange, Wordpress 2 Wp Oauth Server, Wordpress 2026-08-06 9.3 Critical
Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.
CVE-2022-34149 1 Miniorange 1 Wp Oauth Server 2025-02-20 9.8 Critical
Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin <= 3.0.4 at WordPress.