CRITICAL
9.8 CVE-2026-120844 Published 6 Nov 2026
WordPress miniOrange OAuth SSO Plugin Privilege Escalation Vulnerability
Worried this affects your website?
An Incorrect Privilege Assignment vulnerability has been found in the miniOrange OAuth Single Sign On – SSO (OAuth Client) WordPress plugin. This flaw allows privilege escalation.
The issue affects the plugin from n/a through version 7.1.3.
Reference: CVE-2026-120844 on NVD
← Back to Security News