Critical · 9.8 CVE-2022-34149 EUVD-2022-37164GHSA-69gh-wmhf-72wv

WordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerability

Published Aug 22, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: miniOrange Product: WP OAuth Server (WordPress plugin) Category: Web / CMS

Description

Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin <= 3.0.4 at WordPress.

Affected products

Vendor	Product	Affected	Fixed
miniOrange	WP OAuth Server (WordPress plugin)	≤ 3.0.4	—

References