CVE-2026-65520

An unauthenticated SQL injection vulnerability exists in WP OAuth Server versions up to 6.2.0, allowing attackers to execute arbitrary SQL queries on the database. This critical flaw could lead to unauthorized data access, manipulation, or deletion, posing significant risks to the integrity and confidentiality of sensitive information. Organizations using affected versions of WP OAuth Server should prioritize immediate remediation to mitigate potential exploitation.