OAuth Single Sign On – SSO (OAuth Client)

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

373 searches this plugin appeared in over the last 90 days, 20 listed. 339 left out as unrelated or noise (years, numbers, stray words). 1 of its tags isn't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 34 days ago and a band this size takes about a year or more to cross, so the real count is still just over 7K.

14 of the last 27 four- and five-star reviews came from accounts created within a month of posting the review, and 7 of those landed between 2025-09-02 and 2025-09-29.

Registering a wp.org account just to leave a review is common and often entirely legitimate. The share here is unusually high for the sample, so it's worth keeping in mind while reading the reviews.

1. ★★★★★ olivierognn

   4mo ago

   Vikram is a great customer success engineer, multiple time he helped us to solve problem of configurations. The plugin works very well

   Read on wp.org ↗
2. ★★★★★ chamath11

   5mo ago

   I would like to share my appreciation for Vikram Singh for his excellent support regarding the payment issue query for the WP OAuth Client SSO plugin. Vikram was very responsive, professional, and helpful throughout the process. I especially appreciate his hard work and dedication, even over the weekend, to help resolve the issue. His clear communication and commitment made the whole experience smooth and positive. Thank you, Vikram, for your outstanding support and dedication. This topic was modified 1 month ago by chamath11. This topic was modified 1 month ago by chamath11.

   Read on wp.org ↗
3. ★★★★★ AlexKole

   5mo ago

   The simple and intuitive interface and easy connection have been tested on numerous websites. It always works perfectly.

   Read on wp.org ↗
4. ★★★★★ angieliang

   5mo ago

   Manish Chopra provided outstanding support during our plugin setup. He was extremely patient, knowledgeable, and professional throughout the entire process. The setup took over two hours, and Manish stayed with us the whole time to troubleshoot each issue carefully and make sure everything was completed properly. He explained the steps clearly, helped identify and resolve the configuration issues, and made sure the SSO setup was working as expected before ending the session. I really appreciate his dedication, technical expertise, and excellent customer service. Thank you, Manish, for your great support!

   Read on wp.org ↗
5. ★★★★★ Jijil

   7mo ago

   I have been using it on few sites and it’s really helpful, keep it up.

   Read on wp.org ↗
6. ★★★★★ ta55o

   7mo ago

   Thanks to Vikram Singh, who provided me with outstanding support while testing the plugin to validate technical points before purchasing. He was very responsive and available and made sure it answer all of our needs. We exchanged many email and even went on a video call to support me and answer all my question. I would recommend miniOrange not only for the quality of their product but also for their above expectation customer service. Thank again Vikram for your help!

   Read on wp.org ↗
7. ★★★★★ sushantvirdi

   8mo ago

   miniOrange WordPress plugins have proven to be highly reliable and feature-rich, especially for authentication and security use cases like SSO, social login, and 2FA. The plugins are easy to set up, user-friendly, and integrate smoothly with various platforms and identity providers. What really stands out is their exceptional support team. They are quick to respond, knowledgeable, and genuinely helpful in resolving issues. In many cases, they go the extra mile to guide users through configurations or even suggest tailored solutions. Users often receive timely responses and hands-on assistance, which makes a big difference during complex integrations

   Read on wp.org ↗
8. ★★★★★ Michael

   8mo ago

   I’m in the process of migrating this site to a new domain and had an issue where I needed to gain access to the configuration to update the redirect setting as I was locked out due to an expired license. <span data-olk-copy-source=”MessageBody”>Gaurav Atha</span> and DeePeek (please forgive me if I have your names incorrect) we’re very understanding, supportive and knowledgeable. They assisted me in gaining access once again so I can move forward in migrating our website and providing information on renewing our licensing. Many thanks!!

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 7.0.0 UI changes and security fixes in the WordPress OAuth plugin 7.0.0
2. — Version 6.26.20 Added compatibility with WordPress 7.0 Added AI / MCP Abilities API integration (8 abilities for configuring SSO, diagnosing errors, and submitting support queries via AI agents) Added AI Setup tab in Troubleshooting pag 6.26.20
3. — Version 6.26.19 Added filter to load SSO button on WooCommerce login page Added filter to load SSO button on Blocksy theme login page Security fixes in the WordPress OAuth plugin 6.26.19
4. — Version 6.26.18 Fixed client IP detection in multi-proxy setups Fixed error when configuring an invalid UserInfo endpoint Fixed Debug log unexpected character issue. 6.26.18
5. — Version 6.26.17 Removed Cyber Monday sale advertise 6.26.17
6. — Version 6.26.16 Added WordPress 6.9 Compatibility Added Cyber Monday sale advertise 6.26.16

All 13 disclosed vulnerabilities are patched in the current version (7.1.4). Sites still on an older version should update.

1. Patched Medium · 5.3 OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 - Unauthenticated Authentication Bypass ↗
   2026-09-30 CVE-2026-97274 Improper Authentication Affects <= 7.1.2 Patched in 7.1.3
2. Patched High · 7.3 OAuth Single Sign On <= 7.0.0 - Unauthenticated Arbitrary User Account Takeover ↗
   2026-08-31 CVE-2026-82183 Improper Authentication Affects <= 7.0.0 Patched in 7.0.1
3. Patched Medium · 5.3 OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 - Missing Authorization ↗
   2026-08-12 CVE-2026-28008 Missing Authorization Affects <= 7.0.0 Patched in 7.0.1
4. Patched Medium · 5.3 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 - Missing Authorization ↗
   2026-02-05 CVE-2025-10753 Missing Authorization Affects <= 6.26.14 Patched in 6.26.15
5. Patched Critical · 9.8 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token() ↗
   2025-10-03 CVE-2025-9485 Improper Verification of Cryptographic Signature Affects <= 6.26.12 Patched in 6.26.13
6. Patched Medium · 4.3 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Cross-Site Request Forgery ↗
   2025-09-25 CVE-2025-10752 Cross-Site Request Forgery Affects <= 6.26.12 Patched in 6.26.13
7. Patched High · 8.1 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.3 - Authentication Bypass ↗
   2024-12-11 CVE-2024-10111 Improper Authentication Affects <= 6.26.3 Patched in 6.26.4
8. Patched High · 8.8 OAuth Single Sign On – SSO (OAuth Client) <= 6.23.3 - Missing Authorization ↗
   2023-05-24 CVE-2022-34155 Missing Authorization Affects <= 6.23.3 Patched in 6.23.4
9. Patched Medium · 4.3 OAuth Single Sign On – SSO (OAuth Client) <= 6.24.1 - Cross-Site Request Forgery via 'delete' in mooauth_client_applist_page ↗
   2023-02-28 CVE-2023-1092 Cross-Site Request Forgery Affects <= 6.24.1 Patched in 6.24.2
10. Patched Medium · 4.3 OAuth Single Sign On – SSO (OAuth Client) <= 6.24.1- Cross-Site Request Forgery via 'discard' in mooauth_client_applist_page ↗
    2023-02-15 CVE-2023-1093 Cross-Site Request Forgery Affects <= 6.24.1 Patched in 6.24.2
11. Patched High · 8.1 OAuth Single Sign On – SSO (OAuth Client) <= 6.22.5 - Authentication Bypass ↗
    2022-06-27 CVE-2022-2133 Improper Authentication Affects <= 6.22.5 Patched in 6.22.6
12. Patched Medium · 6.4 OAuth Single Sign On – SSO (OAuth Client) <= 6.22.5 - Cross-Site Scripting ↗
    2022-06-22 Improper Neutralization of Input During Web Page Generation Affects <= 6.22.5 Patched in 6.23.0
13. Patched Medium · 6.1 Multiple miniOrange Plugins (Various Version) - Reflected Cross-Site Scripting ↗
    2021-08-30 Improper Neutralization of Input During Web Page Generation Affects <= 6.20.2 Patched in 6.20.3

Translated into 4 languages, 1 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

This plugin’s searches fall outside the topics measured so far. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-10-03 6K+ → 7K+ up after 38 days in tier
2. 2026-08-26 7K+ → 6K+ down after 24 days in tier
3. 2026-08-02 6K+ → 7K+ up after 39 days in tier
4. 2026-06-24 7K+ → 6K+ down after 227 days in tier
5. 2025-11-09 6K+ → 7K+ up after 31 days in tier
6. 2025-10-09 7K+ → 6K+ down after 41 days in tier
7. 2025-08-29 6K+ → 7K+ up after 479 days in tier
8. 2024-05-07 5K+ → 6K+ up after 197 days in tier

Competes with

The plugins that show up in the same WordPress.org searches, most shared searches first, then plugins sharing two or more tags. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for OAuth Single Sign On – SSO (OAuth Client) into a readme, a review or a deck. It updates itself.

OAuth Single Sign On – SSO (OAuth Client): 7K+ active installs, 4.9★ (327 reviews). Plugin Pulse (WP Mayor), as of 2026-11-06. https://plugins.wpmayor.com/plugin/miniorange-login-with-eve-online-google-facebook