Oauth single sign on – sso (oauth client)
This hub aggregates every CVE we track for Oauth single sign on – sso (oauth client), a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
6
CVEs tracked
2
Critical
2
High
0
In CISA KEV
Severity distribution
HIGH2MEDIUM2CRITICAL2
Monthly trend
0
0
1
0
0
0
0
0
0
0
0
1
1
0
0
0
1
0
0
0
0
0
1
0
2024-102026-09
Latest CVEs
The 6 most recently published vulnerabilities affecting Oauth single sign on – sso (oauth client).
- CVE-2026-28008WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability9.8
- CVE-2025-10753OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 - Missing Authorization5.3
- CVE-2025-9485OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()9.8
- CVE-2025-10752OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Cross-Site Request Forgery4.3
- CVE-2024-10111OAuth Single Sign On – SSO (OAuth Client) <= 6.26.3 - Authentication Bypass8.1
- CVE-2022-34155WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication8.8
Product normalization is registry-driven with AI assist and human review. How it works