WO
Product
WP OAuth Server
by miniOrange · last CVE Oct 14, 2026
3
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 0Medium 1Low 0
Watch

Add WP OAuth Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-34149
9.8
1%
Aug 22
Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin <= 3.0.4 at WordPress
Affected: through 3.0.4
CVE-2026-65520
9.3
0%
Aug 6
WordPress WP OAuth Server plugin <= 6.2.0 - SQL Injection vulnerability
Affected: through 6.2.0
CVE-2026-107433
6.5
0%
Oct 14
WordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerability
Affected: through 6.4.0
Showing 3