CRITICAL 9.8 CVE-2026-120844 Published 6 Nov 2026

WordPress miniOrange OAuth SSO Plugin Privilege Escalation Vulnerability

Worried this affects your website?

An Incorrect Privilege Assignment vulnerability has been found in the miniOrange OAuth Single Sign On – SSO (OAuth Client) WordPress plugin. This flaw allows privilege escalation.

The issue affects the plugin from n/a through version 7.1.3.

Reference: CVE-2026-120844 on NVD

← Back to Security News