CVE-2026-28148

WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability PUBLISHED

Description (CNA)

Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions.

Vendor / product	Versions
miniOrange / Headless Single Sign On	affected n/a through 1.6

CWE-347

CISA-ADP

No English description supplied.

No references supplied.