CVE-2026-120844 | miniOrange OAuth Single Sign On SSO Plugin up to 7.1.3 on WordPress privileges management

November 6, 2026 Yanac

A vulnerability described as critical has been identified in miniOrange OAuth Single Sign On SSO Plugin up to 7.1.3 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation results in improper privilege management.

This vulnerability is reported as CVE-2026-120844. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More