CVE-2026-57807 | miniOrange OAuth Single Sign On Plugin up to 38.5.8 on WordPress OAuth Client password recovery

July 10, 2026 Yanac

A vulnerability labeled as problematic has been found in miniOrange OAuth Single Sign On Plugin up to 38.5.8 on WordPress. This affects an unknown part of the component OAuth Client. Executing a manipulation can lead to weak password recovery.

This vulnerability is tracked as CVE-2026-57807. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More