Description
Authentication Bypass vulnerability in miniOrange OAuth 2.0 client for SSO plugin <= 1.11.3 at WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| miniOrange | OAuth 2.0 client for SSO (WordPress plugin) | ≤ 1.11.3 | — |
Critical · 9.8
CVE-2022-34858
EUVD-2022-37764GHSA-m7c9-5c5m-jq4q
WordPress OAuth 2.0 client for SSO plugin <= 1.11.3 - Authentication Bypass vulnerability
Published Aug 22, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack