Plugin icon

Miniorange Oauth Oidc Single Sign On

miniorange-oauth-oidc-single-sign-on

Vulnerabilities:

11

Last Updated:

n/a

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2026-07-09
Title
WordPress Single Sign-On (SSO) - Multisite Premium <= 38.5.8 - Missing Authorization
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Fixed in
Fixed in 30.5.4
CVSS
5.3 (medium)
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Fixed in
Fixed in 18.5.4
CVSS
5.3 (medium)
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Fixed in
Fixed in 48.5.4
CVSS
5.3 (medium)
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Fixed in
Fixed in 38.5.4
CVSS
5.3 (medium)
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Fixed in
Fixed in 28.5.4
CVSS
5.3 (medium)
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Fixed in
Fixed in 50.5.4
CVSS
5.3 (medium)
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Fixed in
Fixed in 40.5.4
CVSS
5.3 (medium)
Published
2023-02-28
Title
OAuth Single Sign On - SSO (OAuth Client) Enterprise < 48.4.9 - IdP Deletion via CSRF
Fixed in
Fixed in 48.4.9
CVSS
5.4 (medium)
Published
2023-02-28
Title
OAuth Single Sign On - SSO (OAuth Client) Standard < 28.4.9 - IdP Deletion via CSRF
Fixed in
Fixed in 28.4.9
CVSS
5.4 (medium)
Published
2023-02-28
Title
OAuth Single Sign On - SSO (OAuth Client) Premium < 38.4.9 - IdP Deletion via CSRF
Fixed in
Fixed in 38.4.9
CVSS
5.4 (medium)