Wp Oauth Server CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2026-107433

WordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in miniOrange WP OAuth Server miniorange-oauth-20-server allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP OAuth Server: from n/a through 6.4.0.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Miniorange Wordpress-extensions

Products

Wp Oauth Server Wp Oauth Server

CVE-2026-65520

WordPress WP OAuth Server plugin <= 6.2.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.

CVSS 3.1 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Miniorange Wordpress

Products

Wp Oauth Server Wordpress

CVE-2022-34149

WordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerability

Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin <= 3.0.4 at WordPress.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed

Vendors

Miniorange

Products

Wp Oauth Server

Page 1 of 1.