CVE-2026-65520

CriticalCVSS 9.3

Published: 06/08/2026(UTC)Updated: 06/08/2026(UTC)Translated: 06/08/2026(UTC)NVD NIST

Summary

Unauthenticated SQL Injection vulnerability in WP OAuth Server versions up to 6.2.0.

An attacker without authentication can manipulate SQL queries, potentially leading to unauthorized database access and data leakage.

Update the WP OAuth Server plugin to the latest patched version.

Original NVD description (English source)

Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.