Skip to content
PluginCanary

WP OAuth Server ( Login with WordPress )

by miniOrange · 1,000+ active installs · Checked 3 Nov 2026
Healthy3 Warnings

Healthy: vulnerability published 12 Oct 2026, fixed in 6.5.0.

84/ 100 Canary Score
Sub-scores for WP OAuth Server ( Login with WordPress )
Ownership100
Maintenance100
Security70
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 12 Oct 2026, fixed in 6.5.0. Update to version 6.5.0 or later.12 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 21 Sep 2026, fixed in 6.4.0. Update to version 6.4.0 or later.21 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 28 Aug 2026, fixed in 6.3.1. Update to version 6.3.1 or later.28 Aug 2026Evidence
  • InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
cyberlord9216 Jun 2017 to 1 Feb 2022, 74 commits
shubhangigulve29 Apr 2022 to 1 Jul 2022, 6 commits
deepakoauth8 Sep 2022 to 6 Dec 2022, 12 commits
nikhileshbadgu28 Feb 2023 to 4 May 2023, 4 commits
nimeshatxecurify19 Jun 2023 to 4 Jul 2024, 7 commits
manaspatil9 Aug 2024 to 27 Sep 2024, 2 commits
mowpsamldev27 Jan 2025 to 8 Oct 2026, 16 commits

7 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
27 days ago
Releases, 24 months
13
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter for WP OAuth Server ( Login with WordPress )
Q1 20242
Q2 20241
Q3 20243
Q4 20240
Q1 20251
Q2 20251
Q3 20251
Q4 20250
Q1 20261
Q2 20263
Q3 20265
Q4 20261

Last release 8 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
12 Oct 2026WP OAuth Server ( Login with WordPress ) <= 6.4.0 - Missing Authorization5.3<= 6.4.06.5.00
21 Sep 2026OAuth Server <= 6.3.0 - Authenticated (Subscriber+) Arbitrary User Identity Token Issuance to Privilege Escalation8.8<= 6.3.06.4.00
28 Aug 2026WP OAuth Server ( Login with WordPress ) < 6.3.1 - Unauthenticated Information Exposure5.3< 6.3.16.3.10
28 Jul 2026WP OAuth Server ( Login with WordPress ) <= 6.2.0 - Unauthenticated SQL Injection7.5<= 6.2.06.2.10
2 Aug 2022WP OAuth Server <= 3.0.4 - Authentication Bypass9.8<= 3.0.44.0.10

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.9 from 41 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star39
4 star1
3 star0
2 star1
1 star0

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP OAuth Server ( Login with WordPress )
4 May 2026118
11 May 2026178
18 May 2026218
25 May 2026584
1 Jun 2026209
8 Jun 2026639
15 Jun 2026208
22 Jun 2026173
29 Jun 2026531
6 Jul 2026313
13 Jul 2026208
20 Jul 2026620
27 Jul 2026352
3 Aug 2026740
10 Aug 2026364
17 Aug 2026237
24 Aug 2026801
31 Aug 2026290
7 Sep 2026245
14 Sep 2026696
21 Sep 2026526
28 Sep 2026317
5 Oct 2026802
12 Oct 2026513
19 Oct 2026469
26 Oct 2026405
2 Nov 202646

Weekly downloads over the last 4 weeks are 10% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

LoginizerScore 93 · 1,000,000+FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social LoginScore 93 · 10,000+All In One LoginScore 92 · 60,000+WPS Hide LoginScore 91 · 2,000,000+Temporary Login Without PasswordScore 91 · 90,000+

Facts

Version6.5.0
AuthorminiOrange
Added16 Jun 2017
Last updated8 Oct 2026
Active installs1,000+
Requires WordPress5.6
Tested up to7.1.4
Requires PHP7.2
CategoryUser Management & Authentication > User Registration & Login
Tagsoauth2, OpenID, oauth server, OAuth provider, wordpress login

Other plugins by this author: Social Login, Social Sharing by miniOrange, JWT Authentication for WP REST APIs, miniOrange 2FA - Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator), SAML Single Sign On - SSO Login, Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents, OAuth Single Sign On - SSO (OAuth Client), Password Policy Manager, miniOrange OTP Login, Verification and SMS Notifications, Active Directory Integration / LDAP Integration, Custom API for WP, Prevent Files / Folders Access, Page and Post Restriction

Questions

Is WP OAuth Server ( Login with WordPress ) still maintained?

WP OAuth Server ( Login with WordPress ) was last updated on 8 Oct 2026. Its Canary status is Healthy.

Is WP OAuth Server ( Login with WordPress ) safe?

WP OAuth Server ( Login with WordPress ) has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns WP OAuth Server ( Login with WordPress )?

The wordpress.org author is miniOrange. Recent committers: mowpsamldev, manaspatil, nimeshatxecurify, nikhileshbadgu, deepakoauth. We have recorded no ownership change.

What can I use instead of WP OAuth Server ( Login with WordPress )?

Plugins in the same category with a higher Canary Score: Loginizer, FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login, All In One Login, WPS Hide Login, Temporary Login Without Password.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue