CVE-2026-65520

Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.

Score

CVSS 3.1 9.3 Critical

Status

Deferred - audit@patchstack.com

Published

2026-08-06

Last modified

2026-10-24

Weaknesses

CWE-89

Affected products

• Wp Oauth Server (Miniorange)

References

• https://patchstack.com/database/wordpress/plugin/miniorange-oauth-20-server/vulnerability/wordpress-wp-oauth-server-plu…