CVE-2022-34149

Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin <= 3.0.4 at WordPress.

Score

CVSS 3.1 9.8 Critical

Status

Modified - audit@patchstack.com

Published

2022-08-22

Last modified

2026-04-28

Weaknesses

CWE-264, CWE-287

Affected products

• Wp Oauth Server (Miniorange)
• Wp Oauth Server Wordpress Plugin (Miniorange)

References

• https://lana.codes/lanavdb/6d794d65-d44b-4099-94c5-3dd2995b218c?_s_id=cve
• https://patchstack.com/database/vulnerability/miniorange-oauth-20-server/wordpress-wp-oauth-server-plugin-3-0-4-authent…