WSO2 Oauth

The Jenkins project announced unresolved security vulnerabilities affecting the current version of this plugin (why?):
Installation options