MiniOrange WP OAuth Server

• CVE-2026-107433 Medium 6.5 WordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerability 0.3%
• CVE-2026-65520 Critical 9.3 WordPress WP OAuth Server plugin <= 6.2.0 - SQL Injection vulnerability 0.4%