HS
Product
Headless Single Sign On
by miniOrange · last CVE Sep 17, 2026
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 0Medium 0Low 0
Watch

Add Headless Single Sign On to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-62108
9.8
1%
Sep 17
WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability
Affected: through 1.7.0
CVE-2026-28149
9.8
1%
Aug 13
WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability
Affected: through 1.6
CVE-2026-28148
9.8
0%
Aug 13
WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability
Affected: through 1.6
Showing 3