Skip to content
PluginCanary

OAuth Single Sign On - SSO (OAuth Client)

by miniOrange · 6,000+ active installs · Checked 3 Nov 2026
Healthy3 Warnings

Healthy: vulnerability published 30 Sep 2026, fixed in 7.1.3.

81/ 100 Canary Score
Sub-scores for OAuth Single Sign On - SSO (OAuth Client)
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 7.1.3. Update to version 7.1.3 or later.30 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 31 Aug 2026, fixed in 7.0.1. Update to version 7.0.1 or later.31 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 12 Aug 2026, fixed in 7.0.1. Update to version 7.0.1 or later.12 Aug 2026Evidence
  • InfoSEC-37 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
cyberlord9228 Jun 2015 to 22 Feb 2022, 193 commits
ameyatammewar5 Apr 2022 to 14 Jun 2023, 26 commits
cyberorange25 Jul 2023 to 27 Aug 2024, 10 commits
teamwpminiorange14 Nov 2024 to 16 Apr 2026, 20 commits
mowpsamldev4 Jun 2026 to 2 Nov 2026, 9 commits

New committer mowpsamldev made a first commit on 4 Jun 2026.

Maintenance

Last release
2 days ago
Releases, 24 months
26
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter for OAuth Single Sign On - SSO (OAuth Client)
Q1 20242
Q2 20242
Q3 20242
Q4 20243
Q1 20252
Q2 20255
Q3 20253
Q4 20253
Q1 20261
Q2 20262
Q3 20266
Q4 20261

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Sep 2026OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 - Unauthenticated Authentication Bypass5.3<= 7.1.27.1.30
31 Aug 2026OAuth Single Sign On <= 7.0.0 - Unauthenticated Arbitrary User Account Takeover7.3<= 7.0.07.0.10
12 Aug 2026OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 - Missing Authorization5.3<= 7.0.07.0.10
5 Feb 2026OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 - Missing Authorization5.3<= 6.26.146.26.150
3 Oct 2025OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()9.8<= 6.26.126.26.130
25 Sep 2025OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Cross-Site Request Forgery4.3<= 6.26.126.26.130
11 Dec 2024OAuth Single Sign On – SSO (OAuth Client) <= 6.26.3 - Authentication Bypass8.1<= 6.26.36.26.40
24 May 2023OAuth Single Sign On – SSO (OAuth Client) <= 6.23.3 - Missing Authorization8.8<= 6.23.36.23.40
28 Feb 2023OAuth Single Sign On – SSO (OAuth Client) <= 6.24.1 - Cross-Site Request Forgery via 'delete' in mooauth_client_applist_page4.3<= 6.24.16.24.20
15 Feb 2023OAuth Single Sign On – SSO (OAuth Client) <= 6.24.1- Cross-Site Request Forgery via 'discard' in mooauth_client_applist_page4.3<= 6.24.16.24.20
27 Jun 2022OAuth Single Sign On – SSO (OAuth Client) <= 6.22.5 - Authentication Bypass8.1<= 6.22.56.22.60
22 Jun 2022OAuth Single Sign On – SSO (OAuth Client) <= 6.22.5 - Cross-Site Scripting6.4<= 6.22.56.23.00
30 Aug 2021Multiple miniOrange Plugins (Various Version) - Reflected Cross-Site Scripting6.1<= 6.20.26.20.30

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.9 from 327 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star316
4 star3
3 star0
2 star0
1 star8

Momentum

6,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for OAuth Single Sign On - SSO (OAuth Client)
4 May 2026291
11 May 2026500
18 May 2026608
25 May 2026456
1 Jun 20262,245
8 Jun 20261,022
15 Jun 2026964
22 Jun 2026527
29 Jun 2026412
6 Jul 2026665
13 Jul 2026528
20 Jul 20262,397
27 Jul 20262,898
3 Aug 20261,138
10 Aug 20262,762
17 Aug 20261,480
24 Aug 20262,664
31 Aug 20261,030
7 Sep 2026988
14 Sep 20263,216
21 Sep 20263,261
28 Sep 20261,395
5 Oct 20261,421
12 Oct 20261,198
19 Oct 20261,061
26 Oct 2026955
2 Nov 20261,446

Weekly downloads over the last 4 weeks are 16% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Login for Google Apps by WPAuthScore 91 · 10,000+Log in with GoogleScore 89 · 6,000+UsersWP - Social LoginScore 89 · 2,000+Nextend Social Login and RegisterScore 88 · 200,000+Wp Social Login and Register Social CounterScore 85 · 70,000+

Facts

Version7.1.4
AuthorminiOrange
Added28 Jun 2015
Last updated2 Nov 2026
Active installs6,000+
Requires WordPress5.9
Tested up to7.1.4
Requires PHP7.0
CategoryUser Management & Authentication > User Registration & Login
Tagssso, login, OpenID, OAuth 2.0, Single Sign-on

Other plugins by this author: miniOrange 2FA - Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator), Social Login, Social Sharing by miniOrange, JWT Authentication for WP REST APIs, SAML Single Sign On - SSO Login, Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents, Password Policy Manager, miniOrange OTP Login, Verification and SMS Notifications, Active Directory Integration / LDAP Integration, Prevent Files / Folders Access, Page and Post Restriction, Custom API for WP, WP OAuth Server ( Login with WordPress )

Questions

Is OAuth Single Sign On - SSO (OAuth Client) still maintained?

OAuth Single Sign On - SSO (OAuth Client) was last updated on 2 Nov 2026. Its Canary status is Healthy.

Is OAuth Single Sign On - SSO (OAuth Client) safe?

OAuth Single Sign On - SSO (OAuth Client) has no open unpatched vulnerabilities on record. 7 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns OAuth Single Sign On - SSO (OAuth Client)?

The wordpress.org author is miniOrange. Recent committers: mowpsamldev, teamwpminiorange, cyberorange, ameyatammewar, cyberlord92. New committer mowpsamldev made a first commit on 4 Jun 2026.

What can I use instead of OAuth Single Sign On - SSO (OAuth Client)?

Plugins in the same category with a higher Canary Score: Login for Google Apps by WPAuth, Log in with Google, UsersWP - Social Login, Nextend Social Login and Register, Wp Social Login and Register Social Counter.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue