Miniorange vulnerabilities

Products

• Active Directory Integration \/ Ldap Integration 6
• Google Authenticator 6
• 2fa 6
• Otp Verification 5
• Wordpress Social Login And Register 5
• Wordpress Social Login And Register (discord, Google, Twitter, Linkedin) 5
• Oauth Single Sign On 4
• Oauth Single Sign On – Sso (oauth Client) 4
• Wordpress Social Login And Register \(discord\, Google\, Twitter\, Linkedin\) 4
• Headless Single Sign On 3
• Malware Scanner 3
• Discord Integration 3
• Prevent Files / Folders Access 3
• Saml Sp Single Sign On 3
• Saml Sp Single Sign On 3
• Custom Api For Wp 2
• Malware Scanner 2
• Miniorange's Google Authenticator 2
• Otp Verification 2
• Otp Verification With Firebase 2
• Page Restriction 2
• Page Restriction Wordpress (wp) 2
• Saml 2
• Saml Sso - Service Provider 2
• Staff \/ Employee Business Directory For Active Directory 2
• Web3 - Crypto Wallet Login \& Nft Token Gating 2
• Web Application Firewall 2
• Wp Oauth Server 2

Newest

• cyberlord92 oauth single sign on – sso (oauth client) WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.3 - Privilege Escalation vulnerability CVE-2026-120844 9.8 CriticalNovember 6, 2026
• miniorange saml sp single sign on WordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerability CVE-2026-62126 7.5 HighNovember 4, 2026
• miniorange page restriction wordpress (wp) WordPress Page Restriction WordPress (WP) plugin <= 1.6.1 - Broken Access Control vulnerability CVE-2026-54852 5.3 MediumOctober 29, 2026
• miniorange page restriction wordpress (wp) WordPress Page Restriction WordPress (WP) plugin <= 1.6.0 - Broken Access Control vulnerability CVE-2026-114696 5.3 MediumOctober 22, 2026
• miniorange wp oauth server WordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerability CVE-2026-107433 6.5 MediumOctober 14, 2026
• miniorange otp verification WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability CVE-2026-106610 Public exploit 9.8 CriticalOctober 10, 2026
• cyberlord92 oauth single sign on – sso (oauth client) WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability CVE-2026-97274 9.8 CriticalSeptember 30, 2026
• miniorange prevent files / folders access WordPress Prevent files / folders access plugin <= 2.6.7 - Broken Access Control vulnerability CVE-2026-97267 4.3 MediumSeptember 30, 2026
• miniorange headless single sign on WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability CVE-2026-62108 9.8 CriticalSeptember 17, 2026
• miniorange jwt authentication for wp rest apis miniOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication Downgrade CVE-2026-89027 6.9 MediumSeptember 15, 2026
• miniorange wordpress social login and register WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-82229 7.1 HighAugust 31, 2026
• drupal ldap / active directory integration, miniorange ldap \/ active directory integration +1 more LDAP / Active Directory Integration - Moderately critical - Information Disclosure - SA-CONTRIB-2026-115 CVE-2026-81205 Fix available 5.3 MediumAugust 26, 2026
• miniorange wordpress social login and register WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-73351 7.1 HighAugust 18, 2026
• miniorange saml sp single sign on WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability CVE-2026-61979 8.1 HighAugust 13, 2026
• miniorange otp verification WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerability CVE-2026-61967 9.8 CriticalAugust 13, 2026
• miniorange headless single sign on WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability CVE-2026-28149 9.8 CriticalAugust 13, 2026
• miniorange headless single sign on WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability CVE-2026-28148 9.8 CriticalAugust 13, 2026
• cyberlord92 oauth single sign on – sso (oauth client) WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability CVE-2026-28008 9.8 CriticalAugust 13, 2026
• miniorange wp oauth server WordPress WP OAuth Server plugin <= 6.2.0 - SQL Injection vulnerability CVE-2026-65520 9.3 CriticalAugust 6, 2026
• miniorange otp verification WordPress miniorange otp verification plugin <= 5.5.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-61957 7.1 HighJuly 27, 2026
• miniorange wordpress social login and register WordPress WordPress Social Login and Register plugin <= 7.8.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-65561 6.5 MediumJuly 27, 2026
• miniorange discord integration WordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerability CVE-2026-59545 8.1 HighJuly 23, 2026
• miniorange otp verification WordPress miniorange otp verification plugin <= 5.4.9 - Privilege Escalation vulnerability CVE-2026-42731 9.8 CriticalMay 27, 2026
• miniorange backup and restore WordPress Plugin Backup and Restore 1.0.3 Arbitrary File Deletion CVE-2021-47979 8.7 HighMay 16, 2026
• drupal saml sso - service provider SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031 CVE-2026-5343 Fix available 7.4 HighApril 1, 2026
• drupal saml sso - service provider SAML SSO - Service Provider - Critical - Cross-site scripting - SA-CONTRIB-2026-018 CVE-2026-3217 Fix available 6.1 MediumFebruary 25, 2026
• miniorange wordpress social login and register WordPress WordPress Social Login and Register plugin <= 7.7.0 - Local File Inclusion vulnerability CVE-2025-68974 6.6 MediumDecember 30, 2025
• miniorange miniorange's google authenticator WordPress miniOrange's Google Authenticator Plugin <= 6.1.1 - Broken Access Control Vulnerability CVE-2025-54745 6.5 MediumDecember 18, 2025
• miniorange prevent files / folders access WordPress Prevent files / folders access Plugin <= 2.6.0 - Path Traversal Vulnerability CVE-2025-53561 6.5 MediumAugust 20, 2025
• miniorange custom api for wp WordPress Custom API for WP <= 4.2.2 - SQL Injection Vulnerability CVE-2025-54048 9.3 CriticalAugust 20, 2025
• miniorange custom api for wp WordPress Custom API for WP <= 4.2.2 - Privilege Escalation Vulnerability CVE-2025-54049 9.9 CriticalAugust 20, 2025
• drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 more Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-082 CVE-2025-6675 Fix available 4.8 MediumJune 25, 2025
• miniorange password policy manager WordPress Password Policy Manager plugin <= 2.0.4 - Account Takeover vulnerability CVE-2025-31019 8.8 HighJune 9, 2025
• miniorange wordpress social login and register WordPress Social Login and Register plugin <= 7.6.10 - Local File Inclusion Vulnerability CVE-2025-47670 8.1 HighMay 23, 2025
• miniorange discord integration WordPress miniOrange Discord Integration plugin <= 2.2.2 - Local File Inclusion Vulnerability CVE-2025-47672 8.1 HighMay 23, 2025
• drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 more Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-056 CVE-2025-47710 Fix available 7.4 HighMay 7, 2025
• drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 more Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-055 CVE-2025-47709 Fix available 6.5 MediumMay 7, 2025
• drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 more Enterprise MFA - TFA for Drupal - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-054 CVE-2025-47708 Fix available 8.8 HighMay 7, 2025
• drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 more Enterprise MFA - TFA for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2025-053 CVE-2025-47707 Fix available 7.5 HighMay 7, 2025
• drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 more Enterprise MFA - TFA for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2025-052 CVE-2025-47706 Fix available 4.8 MediumMay 7, 2025
• miniorange wordpress rest api authentication WordPress REST API Authentication plugin <= 3.6.3 - Settings Change Vulnerability CVE-2025-39545 5.4 MediumApril 16, 2025
• cyberlord92 miniorange social login and register (discord, google, twitter, linkedin), miniorange social login +1 more miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon <= 200.3.9 - Authentication Bypass CVE-2024-11087 8.1 HighMarch 8, 2025
• miniorange page restriction, cyberlord92 page and post restriction +1 more Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure CVE-2024-11297 5.3 MediumDecember 20, 2024
• miniorange saml sp single sign on WordPress SAML Single Sign On – SSO Login plugin <= 5.0.4 - Broken Access Control vulnerability CVE-2023-41873 4.3 MediumDecember 13, 2024
• miniorange yourmembership single sign on WordPress YourMembership Single Sign On plugin <= 1.1.3 - Broken Access Control vulnerability CVE-2023-37987 6.5 MediumDecember 13, 2024
• miniorange wordpress social login and register (discord, google, twitter, linkedin) WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 - Broken Access Control vulnerability CVE-2023-24375 3.5 LowDecember 9, 2024
• miniorange wordpress social login and register (discord, google, twitter, linkedin), wordpress social login and register \(discord\, google\, twitter\, linkedin\) +1 more WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.6.0 - Arbitrary Content Deletion vulnerability CVE-2023-25455 5.3 MediumDecember 9, 2024
• miniorange otp verification WordPress miniorange otp verification plugin <= 4.2.1 - Broken Access Control vulnerability CVE-2023-47776 4.3 MediumDecember 9, 2024
• drupal oauth & openid connect single sign on – sso (oauth/oidc client), miniorange oauth \& openid connect single sign-on +1 more OAuth & OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) - Critical - Cross Site Scripting - SA-CONTRIB-2024-067 CVE-2024-13301 Fix available 6.1 MediumDecember 4, 2024
• cyberlord92 miniorange otp verification with firebase, miniorange otp verification +1 more Miniorange OTP Verification with Firebase <= 3.6.0 - Privilege Escalation via Registration due to Administrator Default User Role Value CVE-2024-9863 9.8 CriticalOctober 17, 2024
• Show olderLoading…