CVE-2026-62108

WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability PUBLISHED

Description (CNA)

Unauthenticated Broken Authentication in Headless Single Sign On <= 1.7.0 versions.

Vendor / product	Versions
miniOrange / Headless Single Sign On	affected n/a through 1.7.0

CWE-290

CISA-ADP

No English description supplied.

No references supplied.