Plugin icon

OAuth Single Sign On – SSO (OAuth Client)

miniorange-login-with-eve-online-google-facebook

Vulnerabilities:

9

Last Updated:

June 4, 2026

Active Installs:

7000

Published
Title
Fixed in
CVSS
Published
2026-02-05
Title
OAuth Single Sign On – SSO (OAuth Client) < 6.26.15 - Missing Authorization
Fixed in
Fixed in 6.26.15
CVSS
5.3 (medium)
Published
2025-10-03
Title
OAuth Single Sign On < 6.26.13 - Authentication Bypass
Fixed in
Fixed in 6.26.13
CVSS
9.8 (critical)
Published
2025-09-25
Title
OAuth Single Sign On – SSO (OAuth Client) < 6.26.13 - Cross-Site Request Forgery
Fixed in
Fixed in 6.26.13
CVSS
4.3 (medium)
Published
2024-12-11
Title
OAuth Single Sign On – SSO (OAuth Client) < 6.26.4 - Authentication Bypass
Fixed in
Fixed in 6.26.4
CVSS
8.1 (high)
Published
2023-07-18
Title
OAuth Single Sign On – SSO (OAuth Client) < 6.23.4 - Improper Authentication
Fixed in
Fixed in 6.23.4
CVSS
8.8 (high)
Published
2023-02-28
Title
OAuth Single Sign On - SSO (OAuth Client) < 6.24.2 - IdP Discard via CSRF
Fixed in
Fixed in 6.24.2
CVSS
5.4 (medium)
Published
2023-02-28
Title
OAuth Single Sign On - SSO (OAuth Client) Free < 6.24.2 - IdP Deletion via CSRF
Fixed in
Fixed in 6.24.2
CVSS
5.4 (medium)
Published
2022-06-27
Title
OAuth Single Sign On < 6.22.6 - Authentication Bypass
Fixed in
Fixed in 6.22.6
CVSS
9.1 (critical)
Published
2021-08-30
Title
Multiple Plugins from miniorange - Reflected Cross-Site Scripting via appId
Fixed in
Fixed in 6.20.3
CVSS
8.8 (high)