OAuth Single Sign On – SSO (OAuth Client)

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. The recent download trend is too spiky to read.

14 of the last 27 four- and five-star reviews came from accounts created within a month of posting the review, and 7 of those landed between 2025-09-02 and 2025-09-29.

Registering a wp.org account just to leave a review is common and often entirely legitimate. The share here is unusually high for the sample, so it's worth keeping in mind while reading the reviews.

1. ★★★★★ olivierognn

   2mo ago

   Vikram is a great customer success engineer, multiple time he helped us to solve problem of configurations. The plugin works very well

   Read on wp.org ↗
2. ★★★★★ chamath11

   2mo ago

   I would like to share my appreciation for Vikram Singh for his excellent support regarding the payment issue query for the WP OAuth Client SSO plugin. Vikram was very responsive, professional, and helpful throughout the process. I especially appreciate his hard work and dedication, even over the weekend, to help resolve the issue. His clear communication and commitment made the whole experience smooth and positive. Thank you, Vikram, for your outstanding support and dedication. This topic was modified 1 month ago by chamath11. This topic was modified 1 month ago by chamath11.

   Read on wp.org ↗
3. ★★★★★ AlexKole

   2mo ago

   The simple and intuitive interface and easy connection have been tested on numerous websites. It always works perfectly.

   Read on wp.org ↗
4. ★★★★★ angieliang

   2mo ago

   Manish Chopra provided outstanding support during our plugin setup. He was extremely patient, knowledgeable, and professional throughout the entire process. The setup took over two hours, and Manish stayed with us the whole time to troubleshoot each issue carefully and make sure everything was completed properly. He explained the steps clearly, helped identify and resolve the configuration issues, and made sure the SSO setup was working as expected before ending the session. I really appreciate his dedication, technical expertise, and excellent customer service. Thank you, Manish, for your great support!

   Read on wp.org ↗
5. ★★★★★ Jijil

   5mo ago

   I have been using it on few sites and it’s really helpful, keep it up.

   Read on wp.org ↗
6. ★★★★★ ta55o

   5mo ago

   Thanks to Vikram Singh, who provided me with outstanding support while testing the plugin to validate technical points before purchasing. He was very responsive and available and made sure it answer all of our needs. We exchanged many email and even went on a video call to support me and answer all my question. I would recommend miniOrange not only for the quality of their product but also for their above expectation customer service. Thank again Vikram for your help!

   Read on wp.org ↗
7. ★★★★★ sushantvirdi

   5mo ago

   miniOrange WordPress plugins have proven to be highly reliable and feature-rich, especially for authentication and security use cases like SSO, social login, and 2FA. The plugins are easy to set up, user-friendly, and integrate smoothly with various platforms and identity providers. What really stands out is their exceptional support team. They are quick to respond, knowledgeable, and genuinely helpful in resolving issues. In many cases, they go the extra mile to guide users through configurations or even suggest tailored solutions. Users often receive timely responses and hands-on assistance, which makes a big difference during complex integrations

   Read on wp.org ↗
8. ★★★★★ incofast

   6mo ago

   The plugin works great and does exactly what it promises. I had an issue with the payment for the renewal, but thanks to the responsiveness of the support team – and Gaurav Atha in particular – we quickly managed to schedule a call and resolve the problem in real time. Highly recommended

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 7.0.0 UI changes and security fixes in the WordPress OAuth plugin 7.0.0
2. — Version 6.26.20 Added compatibility with WordPress 7.0 Added AI / MCP Abilities API integration (8 abilities for configuring SSO, diagnosing errors, and submitting support queries via AI agents) Added AI Setup tab in Troubleshooting pag 6.26.20
3. — Version 6.26.19 Added filter to load SSO button on WooCommerce login page Added filter to load SSO button on Blocksy theme login page Security fixes in the WordPress OAuth plugin 6.26.19
4. — Version 6.26.18 Fixed client IP detection in multi-proxy setups Fixed error when configuring an invalid UserInfo endpoint Fixed Debug log unexpected character issue. 6.26.18
5. — Version 6.26.17 Removed Cyber Monday sale advertise 6.26.17
6. — Version 6.26.16 Added WordPress 6.9 Compatibility Added Cyber Monday sale advertise 6.26.16

10 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 - Missing Authorization ↗
   2026-02-05 CVE-2025-10753 Missing Authorization Affects <= 6.26.14 Patched in 6.26.15
2. Critical · 9.8 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token() ↗
   2025-10-03 CVE-2025-9485 Improper Verification of Cryptographic Signature Affects <= 6.26.12 Patched in 6.26.13
3. Medium · 4.3 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Cross-Site Request Forgery ↗
   2025-09-25 CVE-2025-10752 Cross-Site Request Forgery (CSRF) Affects <= 6.26.12 Patched in 6.26.13
4. High · 8.1 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.3 - Authentication Bypass ↗
   2024-12-11 CVE-2024-10111 Improper Authentication Affects <= 6.26.3 Patched in 6.26.4
5. High · 8.8 OAuth Single Sign On – SSO (OAuth Client) <= 6.23.3 - Missing Authorization ↗
   2023-05-24 CVE-2022-34155 Missing Authorization Affects <= 6.23.3 Patched in 6.23.4
6. Medium · 4.3 OAuth Single Sign On – SSO (OAuth Client) <= 6.24.1 - Cross-Site Request Forgery via 'delete' in mooauth_client_applist_page ↗
   2023-02-28 CVE-2023-1092 Cross-Site Request Forgery (CSRF) Affects <= 6.24.1 Patched in 6.24.2
7. Medium · 4.3 OAuth Single Sign On – SSO (OAuth Client) <= 6.24.1- Cross-Site Request Forgery via 'discard' in mooauth_client_applist_page ↗
   2023-02-15 CVE-2023-1093 Cross-Site Request Forgery (CSRF) Affects <= 6.24.1 Patched in 6.24.2
8. High · 8.1 OAuth Single Sign On – SSO (OAuth Client) <= 6.22.5 - Authentication Bypass ↗
   2022-06-27 CVE-2022-2133 Improper Authentication Affects <= 6.22.5 Patched in 6.22.6
9. Medium · 6.4 OAuth Single Sign On – SSO (OAuth Client) <= 6.22.5 - Cross-Site Scripting ↗
   2022-06-22 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 6.22.5 Patched in 6.23.0
10. Medium · 6.1 Multiple miniOrange Plugins (Various Version) - Reflected Cross-Site Scripting ↗
    2021-08-30 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 6.20.2 Patched in 6.20.3

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 4 languages, 1 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-26 7K+ → 6K+ down after 6 days in tier
2. 2026-08-20 6K+ → 7K+ up after 3 days in tier
3. 2026-08-17 7K+ → 6K+ down after 15 days in tier
4. 2026-08-02 6K+ → 7K+ up after 1 days in tier
5. 2026-08-01 7K+ → 6K+ down after 4 days in tier
6. 2026-07-28 6K+ → 7K+ up after 2 days in tier
7. 2026-07-26 7K+ → 6K+ down after 3 days in tier
8. 2026-07-23 6K+ → 7K+ up after 29 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Tim's Nextcloud SSO OAuth2 300+ installs · 4.3★ · 3 shared tags C
• SAML Single Sign On – SSO Login 10K+ installs · 4.9★ · 2 shared tags A
• Login for Google Apps 10K+ installs · 4.5★ · 2 shared tags C
• O OneLogin SAML SSO 7K+ installs · 4.2★ · 2 shared tags A
• Learnworlds-SSO 200+ installs · 3.8★ · 2 shared tags D
• WP Login and Register using JWT 100+ installs · 4.2★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for OAuth Single Sign On – SSO (OAuth Client) into a readme, a review or a deck. It updates itself.

OAuth Single Sign On – SSO (OAuth Client): 6K+ active installs, 4.9★ (323 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/miniorange-login-with-eve-online-google-facebook