MiniOrange Headless Single Sign On

• CVE-2026-62108 Critical 9.8 WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability 0.6%
• CVE-2026-28149 Critical 9.8 WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability 0.6%
• CVE-2026-28148 Critical 9.8 WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability 0.3%