OAuth Single Sign On – SSO (OAuth Client) vulnerabilities

2 known vulnerabilities in OAuth Single Sign On – SSO (OAuth Client) from miniOrange. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  OAuth Single Sign On – SSO (OAuth Client): Incorrect Privilege Assignment

  CVE-2026-120844Nov 6, 2026miniOrange

  Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) miniorange-login-with-eve-online-google-facebook allows Privilege Escalation.This issue affects OAuth Single Sign On – SSO (OAuth Client): from n/a through 7.1

• 8.8 High severity

  OAuth Single Sign On – SSO (OAuth Client): Improper Authentication

  CVE-2022-34155Jul 18, 2023miniOrange

  Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) plugin allows Authentication Bypass.This issue affects OAuth Single Sign On – SSO (OAuth Client): from n/a through 6.23.3.