Miniorange WP Oauth Server vulnerabilities

3 vulnerabilities

Known vulnerabilities in Miniorange WP Oauth Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2026-107433miniorangewp oauth server
EPSS score
0.27%
Missing Authorization vulnerability in miniOrange WP OAuth Server miniorange-oauth-20-server allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP OAuth Server: from n/a through 6.4.0.9.8CVE-2022-34149miniorangewp oauth server+2
EPSS score
1.31%
Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin <= 3.0.4 at WordPress.9.3CVE-2026-65520miniorangewp oauth server+1
EPSS score
0.40%
Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.