CVE-2026-65520

Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.

Credits

Luis Koleski | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/miniorange-oauth-20-server/vulnerability/wordpress-wp-oauth-server-plugin-6-2-0-sql-injection-vulnerability?_s_id=cve