Cyberlord92 vulnerabilities

Products

• Oauth Single Sign On – Sso (oauth Client) 9
• Active Directory Integration / Ldap Integration 4
• Miniorange Otp Verification With Firebase 4
• Miniorange Social Login And Register (discord, Google, Twitter, Linkedin) 4
• Page And Post Restriction 4
• Miniorange Otp Login, Verification And Sms Notifications 3
• Saml Single Sign On – Sso Login 3
• Broken Link Checker | Finder 2
• Employee Directory – Staff Directory And Listing 2
• Integrate Dynamics 365 Crm 2
• Powerbi Embed Reports 2
• Web Application Firewall – Website Security 2

Newest

• cyberlord92 oauth single sign on – sso (oauth client) WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.3 - Privilege Escalation vulnerability CVE-2026-120844 9.8 CriticalNovember 6, 2026
• cyberlord92 page and post restriction Page and Post Restriction <= 1.6.1 - Unauthenticated Authentication Bypass via REST API Nonce Bypass via Cookie Re-Authentication CVE-2026-118194 6.5 MediumOctober 30, 2026
• cyberlord92 miniorange otp login, verification and sms notifications miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace State CVE-2026-103895 8.1 HighOctober 16, 2026
• cyberlord92 oauth single sign on – sso (oauth client) WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability CVE-2026-97274 9.8 CriticalSeptember 30, 2026
• cyberlord92 miniorange otp login, verification and sms notifications miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter CVE-2026-85984 Public exploit 9.8 CriticalSeptember 26, 2026
• cyberlord92 saml single sign on – sso login SAML Single Sign On <= 5.4.6 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning CVE-2026-75807 7.5 HighAugust 29, 2026
• cyberlord92 oauth single sign on – sso (oauth client) WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability CVE-2026-28008 9.8 CriticalAugust 13, 2026
• cyberlord92 page and post restriction Page and Post Restriction <= 1.4.1 - Unauthenticated Missing Authorization to Sensitive Information Exposure via REST API CVE-2026-12000 7.5 HighAugust 5, 2026
• cyberlord92 miniorange social login and register (discord, google, twitter, linkedin) miniOrange Social Login and Register < 7.8.0 - Unauthenticated Account Takeover CVE-2026-14300 8.1 HighJuly 29, 2026
• cyberlord92 saml single sign on – sso login SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter CVE-2026-15981 Public exploit 9.8 CriticalJuly 23, 2026
• cyberlord92 saml single sign on – sso login SAML Single Sign On <= 5.4.3 - Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusion CVE-2026-15013 Public exploit 9.8 CriticalJuly 16, 2026
• cyberlord92 miniorange social login and register (discord, google, twitter, linkedin) miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP Flow CVE-2026-12761 9.8 CriticalJuly 10, 2026
• cyberlord92 miniorange otp login, verification and sms notifications miniOrange OTP Login, Verification and SMS Notifications <= 5.5.1 - Authentication Bypass to Administrator Account Takeover via 'username_b' Parameter CVE-2026-14245 9.8 CriticalJuly 9, 2026
• cyberlord92 all-in-one microsoft 365 & entra id / azure ad sso login All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypass CVE-2026-2628 9.8 CriticalMarch 3, 2026
• cyberlord92 employee directory – staff directory and listing Employee Directory <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form_title' Shortcode Attribute CVE-2026-1279 6.4 MediumFebruary 6, 2026
• cyberlord92 oauth single sign on – sso (oauth client) OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 - Missing Authorization CVE-2025-10753 5.3 MediumFebruary 6, 2026
• cyberlord92 integrate dynamics 365 crm Integrate Dynamics 365 CRM <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Field Mapping Configuration CVE-2026-0725 4.4 MediumJanuary 17, 2026
• cyberlord92 miniorange otp verification and sms notification for woocommerce miniOrange OTP Verification and SMS Notification for WooCommerce <= 4.3.8 - Missing Authorization to Unauthenticated Notification Settings Modification CVE-2025-14948 5.3 MediumJanuary 10, 2026
• cyberlord92 wp login and register using jwt WP Login and Register using JWT <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) API Key Exposure CVE-2025-12822 4.3 MediumNovember 19, 2025
• cyberlord92 password policy manager | password manager Password Policy Manager | Password Manager <= 2.0.5 - Missing Authorization to Authenticated (Subscriber+) Configuration Log Out CVE-2025-11255 4.3 MediumOctober 25, 2025
• cyberlord92 powerbi embed reports PowerBI Embed Reports <= 1.2.0 - Unauthenticated Sensitive Information Disclosure CVE-2025-10750 5.3 MediumOctober 18, 2025
• cyberlord92 login with yourmembership – ym sso login Login with YourMembership - YM SSO Login <= 1.1.7 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'moym_display_test_attributes' CVE-2025-10648 5.3 MediumOctober 15, 2025
• cyberlord92 oauth single sign on – sso (oauth client) OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token() CVE-2025-9485 Public exploit 9.8 CriticalOctober 4, 2025
• cyberlord92 integrate dynamics 365 crm Integrate Dynamics 365 CRM <= 1.0.9 - Missing Authorization CVE-2025-10746 6.5 MediumOctober 4, 2025
• cyberlord92 oauth single sign on – sso (oauth client) OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Cross-Site Request Forgery CVE-2025-10752 4.3 MediumSeptember 26, 2025
• cyberlord92 miniorange otp verification with firebase Miniorange OTP Verification with Firebase 3.1.0 - 3.6.2 - Unauthenticated Privilege Escalation CVE-2025-7665 8.1 HighSeptember 19, 2025
• cyberlord92 user sync User Sync – Remote User Sync <= 1.0.2 - Cross-Site Request Forgery to Plugin Deactivation CVE-2025-9891 4.3 MediumSeptember 17, 2025
• cyberlord92 employee directory – staff directory and listing, emarket-design campus directory – faculty, staff & student directory plugin for wordpress, customer support ticket system & helpdesk plugin for wordpress +5 more +7 more Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution CVE-2025-8420 8.1 HighAugust 6, 2025
• cyberlord92 wordpress single sign-on (sso) - multisite all-inclusive, wordpress single sign-on (sso) - multisite enterprise, wordpress single sign-on (sso) - multisite premium +4 more +6 more WordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure CVE-2025-6003 5.3 MediumJune 12, 2025
• cyberlord92 miniorange social login and register (discord, google, twitter, linkedin), miniorange social login +1 more miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon <= 200.3.9 - Authentication Bypass CVE-2024-11087 8.1 HighMarch 8, 2025
• cyberlord92 broken link checker | finder WordPress Broken Link Checker | Finder plugin <= 2.4.2 - Broken Access Control vulnerability CVE-2023-46082 5.3 MediumJanuary 2, 2025
• miniorange page restriction, cyberlord92 page and post restriction +1 more Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure CVE-2024-11297 5.3 MediumDecember 20, 2024
• cyberlord92 broken link checker | finder Broken Link Checker | Finder <= 2.5.0 - Authenticated (Author+) Blind Server-Side Request Forgery CVE-2024-12121 5.4 MediumDecember 19, 2024
• cyberlord92 oauth single sign on – sso (oauth client) OAuth Single Sign On – SSO (OAuth Client) <= 6.26.3 - Authentication Bypass CVE-2024-10111 8.1 HighDecember 12, 2024
• cyberlord92 powerbi embed reports PowerBI Embed Reports <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11901 6.4 MediumDecember 12, 2024
• cyberlord92 login using wordpress users, saml idp (identity provider) – login with website users +1 more Login using WordPress Users ( WP as SAML IDP ) <= 1.15.6 - Authenticated (Administrator+) SQL Injection CVE-2024-9887 7.2 HighNovember 16, 2024
• cyberlord92 miniorange otp verification with firebase, miniorange otp verification +1 more Miniorange OTP Verification with Firebase <= 3.6.0 - Privilege Escalation via Registration due to Administrator Default User Role Value CVE-2024-9863 9.8 CriticalOctober 17, 2024
• cyberlord92 miniorange otp verification with firebase, miniorange otp verification, otp verification with firebase +2 more Miniorange OTP Verification with Firebase <= 3.6.0 - Unauthenticated Arbitrary User Password Change CVE-2024-9862 9.8 CriticalOctober 17, 2024
• cyberlord92 miniorange otp verification with firebase, miniorange otp verification with firebase +1 more Miniorange OTP Verification with Firebase <= 3.6.0 - Authentication Bypass CVE-2024-9861 8.1 HighOctober 17, 2024
• miniorange web application firewall, cyberlord92 web application firewall – website security +1 more Web Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass CVE-2022-4539 Public exploit 5.3 MediumAugust 31, 2024
• miniorange page restriction, cyberlord92 page and post restriction +1 more Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.4 - Protection Mechanism Bypass CVE-2024-0681 5.3 MediumMarch 13, 2024
• cyberlord92 malware scanner, miniorange web application firewall, cyberlord92 web application firewall – website security +2 more Malware Scanner <= 4.7.2 and Web Application Firewall <= 2.1.1 - Unauthenticated Privilege Escalation CVE-2024-2172 9.8 CriticalMarch 13, 2024
• cyberlord92 staff / employee business directory for active directory, miniorange staff \/ employee business directory for active directory +1 more Staff / Employee Business Directory for Active Directory < 1.2.3 - Improper escaping of LDAP entries CVE-2023-4757 5.4 MediumJanuary 16, 2024
• miniorange google authenticator, cyberlord92 miniorange 2fa – two-factor authentication for wordpress (sms, email & google authenticator) +1 more miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change CVE-2022-4943 7.5 HighOctober 20, 2023
• cyberlord92 active directory integration / ldap integration, miniorange active directory integration \/ ldap integration +1 more Active Directory Integration / LDAP Integration <= 4.1.10 - LDAP Passback CVE-2023-4506 2.2 LowSeptember 26, 2023
• cyberlord92 staff/employee business directory for active directory, miniorange staff \/ employee business directory for active directory +1 more Staff / Employee Business Directory for Active Directory <= 1.2.3 - Authenticated (Admin+) LDAP Passback CVE-2023-4505 2.2 LowSeptember 26, 2023
• cyberlord92 yourmembership single sign on – ym sso login, minorange wordpress yourmembership single sign-on +1 more WordPress YourMembership Single Sign On Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS) CVE-2023-37986 5.9 MediumSeptember 1, 2023
• cyberlord92 oauth single sign on – sso (oauth client), miniorange oauth single sign on +1 more WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication CVE-2022-34155 Public exploit 8.8 HighJuly 18, 2023
• cyberlord92 web3 – crypto wallet login & nft token gating, miniorange web3 - crypto wallet login \& nft token gating +1 more Web3 – Crypto wallet Login & NFT token gating <= 2.6.0 - Authentication Bypass CVE-2023-3249 9.8 CriticalJune 30, 2023
• cyberlord92 active directory integration / ldap integration, miniorange active directory integration \/ ldap integration +1 more Active Directory Integration / LDAP Integration <= 4.1.5 - Authenticated (Subscriber+) LDAP Injection CVE-2023-3447 7.6 HighJune 29, 2023
• Show olderLoading…