Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-120844 EUVD-2026-117997GHSA-7mfr-2gjx-xqcx

WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.3 - Privilege Escalation vulnerability

Published Nov 6, 2026 · Updated Nov 6, 2026 · Assigned by Patchstack

Description

Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) miniorange-login-with-eve-online-google-facebook allows Privilege Escalation.This issue affects OAuth Single Sign On – SSO (OAuth Client): from n/a through 7.1.3.

Affected products

VendorProductAffectedFixed
miniOrange OAuth Single Sign On – SSO (OAuth Client) ≤ 7.1.3 —

References