Limited-Time Offer

Get Extra 20% off on FullCharge Yearly Plan — available for first 10 users only. Don’t miss out! 🚀

TrackWP

WP OAuth Server (OAuth Authentication) · Version history

WP OAuth Server (OAuth Authentication) changelog and version history

Latest version
4.5.2
Sep 24, 2026 (1 month ago)
Releases
39
since 2016
In the last year
3
about one every 122 days
Tested up to
WordPress 6.9.0
PHP 7.4 or later

Releases each year

  • 20163 releases
  • 20174 releases
  • 20183 releases
  • 20196 releases
  • 20207 releases
  • 20214 releases
  • 20223 releases
  • 20233 releases
  • 20242 releases
  • 20251 release
  • 20263 releases

20263 releases

  1. WP OAuth Server (OAuth Authentication) 4.5.2Latest

    • Security Update: Fixed a Contributor-to-Administrator stored XSS via unescaped client_id meta on the OAuth clients admin table. Updating is highly recommended.
    • Hardened wo_client post type capabilities so only administrators can create or edit OAuth clients through core APIs (including XML-RPC).
    • Protected OAuth client post meta (client_id, client_secret, redirect_uri, grant_types, user_id, scope) from unauthorized custom-fields writes.
    • Hardened user-generated profile token clients so they remain available to logged-in users without allowing arbitrary client meta.

  2. WP OAuth Server (OAuth Authentication) 4.5.1

    • Security Update: Scoped the revoke-token AJAX nonce to a named action so a generic default-action nonce cannot be reused. Updating is recommended.
    • Fixed Generate/Regenerate Token nonce fields on the user profile so those actions submit a valid nonce.

  3. WP OAuth Server (OAuth Authentication) 4.5.0

    • Security Update: A patch has been added to protect the private key during certain server configurations. Updating is highly recommended.
    • Added a new admin notice for permalink setting recommendations.
    • Updated with WP 6.9 and up to PHP 8.5.0.

20251 release

  1. WP OAuth Server (OAuth Authentication) 4.4.0

    • (Security Update) Refactored the “destroy” endpoint to remove the auto redirect in favor for a manual checkpoint.
    • Cleaned up misc functions. This should not effect any existing implementations.
    • Tested with 6.4 installed.

20242 releases

  1. WP OAuth Server (OAuth Authentication) 4.3.4

    • Updated to fix deprecated messages for PHP 8.1 and WP 6.2
    • Added prepare statements in CRON cleanup
    • Adjustments to make some options more clear.

  2. WP OAuth Server (OAuth Authentication) 4.3.3

    • Updated wpoauth_authenicate_bypass to return false.
    • Tested with WP 6.2

20233 releases

  1. WP OAuth Server (OAuth Authentication) 4.2.5

    • Updated sanity checks in AJAX

  2. WP OAuth Server (OAuth Authentication) 4.3.2

  3. WP OAuth Server (OAuth Authentication) 4.3.0

20223 releases

  1. WP OAuth Server (OAuth Authentication) 4.2.3

    • Tested WP 6.0.3

  2. WP OAuth Server (OAuth Authentication) 4.2.2

    • Refactored codebase with PHPCS and PHPCBF WordPress Standards
    • Security updates to data handling.
    • General cleanup of unneeded functionality

  3. WP OAuth Server (OAuth Authentication) 4.2.1

20214 releases

  1. WP OAuth Server (OAuth Authentication) 4.2.0

    • Updated/fixed subdirectory issues during Authorization Code Grant Type requests. (duplicate subdirectory issue)
    • PHP 8 Compatibility Check

  2. WP OAuth Server (OAuth Authentication) 4.1.9

  3. WP OAuth Server (OAuth Authentication) 4.1.8

    • Updated ME method to now return user roles by default with an Oauth 2.0 access token
    • Tested with WordPress version 5.8 and PHP 8. All Test Passed.

  4. WP OAuth Server (OAuth Authentication) 4.1.7

    • Updated S256 code challenge method logic for OAuth 2.0 PKCE
    • Fixed issue with headers during initial activation by moving db update to admin_init hook after any activation.

20207 releases

  1. WP OAuth Server (OAuth Authentication) 4.1.6

    • User info mapping options added. Custom map user data points easily in the editor.
    • Role based restriction logic has been added with filter use.

  2. WP OAuth Server (OAuth Authentication) 4.1.5

    • Added new DB version check to ensure DB upgrades are triggered as needed

  3. WP OAuth Server (OAuth Authentication) 4.1.4

    • Patched security concern with file include

  4. WP OAuth Server (OAuth Authentication) 3.8.1

    • Function name updates to adhere to best practices
    • Added sanitation for inputs
    • Cleaned up unneeded files
    • Removed plugin core validation checks as they are redundant and not needed.

  5. WP OAuth Server (OAuth Authentication) 3.8.0

    • Updated broken links and added documentation
    • Tested with the latest version of WordPress

  6. WP OAuth Server (OAuth Authentication) 3.7.92

    • Added sub directory fix to options.
    • Synced Main Options with Pro Version.

  7. WP OAuth Server (OAuth Authentication) 3.7.91

    • Changed content in the admin of plugin to reflect changes on support site.

20196 releases

  1. WP OAuth Server (OAuth Authentication) 3.7.9

    • Removed UNIQUE INDEX from access token to allow for longer JWT.
    • ADDED: Check for required DB upgrade.
    • ADDED: Hooks check

  2. WP OAuth Server (OAuth Authentication) 3.7.8

    • ADDED: Hooks file check
    • UPDATED: MD5 Hash
    • FIXED: Version Headers

  3. WP OAuth Server (OAuth Authentication) 3.7.7

    • ADDED: Added more discovery to the discovery endpoint.

  4. WP OAuth Server (OAuth Authentication) 3.7.6

    • FIXED: Although not used the community version, there was a bug in the Server controller for a missing grant type.

  5. WP OAuth Server (OAuth Authentication) 3.7.5

    • ADDED: Defines DOING_OAUTH for easier hooks
    • ADDED: Select2 for client management

  6. WP OAuth Server (OAuth Authentication) 3.7.1

    • FIXED: Implicit Method (invalid grant type issues)
    • UPDATED: Storage method
    • Tested with WP 5.1

20183 releases

  1. WP OAuth Server (OAuth Authentication) 3.6.0

  2. WP OAuth Server (OAuth Authentication) 3.4.5

  3. WP OAuth Server (OAuth Authentication) 3.4.4

20174 releases

  1. WP OAuth Server (OAuth Authentication) 3.4.3

  2. WP OAuth Server (OAuth Authentication) 3.4.2

  3. WP OAuth Server (OAuth Authentication) 3.2.003

  4. WP OAuth Server (OAuth Authentication) 3.2.002

20163 releases

  1. WP OAuth Server (OAuth Authentication) 3.2.001

  2. WP OAuth Server (OAuth Authentication) 3.1.98

  3. WP OAuth Server (OAuth Authentication) 3.1.97

Questions about WP OAuth Server (OAuth Authentication)’s releases

What is the latest version of WP OAuth Server (OAuth Authentication)?

4.5.2, released on Sep 24, 2026 (1 month ago). It’s tested up to WordPress 6.9.0 and needs PHP 7.4 or later.

How often is WP OAuth Server (OAuth Authentication) updated?

3 releases in the last year, about one every 122 days. Its first release on WordPress.org dates from April 2016.

Know when your rivals ship

Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.

Start free

Release dates come from the day each version’s folder was made in WP OAuth Server (OAuth Authentication)’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.