CVE-2026-65520

CriticalCVSS 9.3

Published: 06/08/2026(UTC)Updated: 12/08/2026(UTC)Translated: 06/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

22th percentile - higher than 22% of all known CVEs

Unauthenticated SQL Injection vulnerability in WP OAuth Server versions up to 6.2.0.

An attacker without authentication can manipulate SQL queries, potentially leading to unauthorized database access and data leakage.

Update the WP OAuth Server plugin to the latest patched version.

Original NVD description (English source)

Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.