Headless Single Sign On

headless-single-sign-on · plugin

Known security vulnerabilities for Headless Single Sign On. Find out in seconds which version runs on your site with WP Lens.

3 known vulnerabilities

3 critical · latest Sep 17, 2026

Vulnerabilities

CVE-2026-62108
WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability
Critical 9.8
CVE-2026-28149
WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability
Critical 9.8
CVE-2026-28148
WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability
Critical 9.8