Critical Unauthenticated Broken Authentication Vulnerability in OAuth Single Sign On – SSO (OAuth Client) Plugin
A critical vulnerability (CVE-2026-28008, CVSS score: 9.8) was discovered in the OAuth Single Sign On – SSO (OAuth Client) plugin, affecting versions up to 7.0.0. This vulnerability allows unauthenticated attackers to bypass authentication, potentially leading to unauthorized access and control. Immediate action is required to update the plugin to a secure version.