Description
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| miniOrange | OAuth Single Sign On – SSO (OAuth Client) | ≤ 7.0.0 | — |
Critical · 9.8
CVE-2026-28008
EUVD-2026-57944GHSA-mf9c-gfqh-h78j
WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability
Published Aug 13, 2026 · Updated Aug 13, 2026 · Assigned by Patchstack