Medium
CVE-2026-97274
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 13
Reset filters
High
CVE-2026-82183
OAuth Single Sign On <= 7.0.0 - Unauthenticated Arbitrary User Account Takeover
Medium
CVE-2026-28008
OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 - Missing Authorization
Medium
CVE-2025-10753
OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 - Missing Authorization
Critical
CVE-2025-9485
OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()
Medium
CVE-2025-10752
OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Cross-Site Request Forgery
High
CVE-2024-10111
OAuth Single Sign On – SSO (OAuth Client) <= 6.26.3 - Authentication Bypass
High
CVE-2022-34155
OAuth Single Sign On – SSO (OAuth Client) <= 6.23.3 - Missing Authorization
Medium
CVE-2023-1092
OAuth Single Sign On – SSO (OAuth Client) <= 6.24.1 - Cross-Site Request Forgery via 'delete' in mooauth_client_applist_page
Medium
CVE-2023-1093
OAuth Single Sign On – SSO (OAuth Client) <= 6.24.1- Cross-Site Request Forgery via 'discard' in mooauth_client_applist_page
High
CVE-2022-2133
OAuth Single Sign On – SSO (OAuth Client) <= 6.22.5 - Authentication Bypass
Medium
bb2a67ff-a452-4ecb-9fd7-bf05fe43a2f7
OAuth Single Sign On – SSO (OAuth Client) <= 6.22.5 - Cross-Site Scripting
Medium
44cbaa25-7e91-4b2e-81c4-ba1d7ba02350
Multiple miniOrange Plugins (Various Version) - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.