Skip to contentMiniorange vulnerabilities
Newest
- cyberlord92 miniorange otp verification with firebase, miniorange otp verification, otp verification with firebase +2 moreMiniorange OTP Verification with Firebase <= 3.6.0 - Unauthenticated Arbitrary User Password ChangeCVE-2024-98629.8 Critical
- cyberlord92 miniorange otp verification with firebase, miniorange otp verification with firebase +1 moreMiniorange OTP Verification with Firebase <= 3.6.0 - Authentication BypassCVE-2024-98618.1 High
- miniorange web application firewall, cyberlord92 web application firewall – website security +1 moreWeb Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism BypassCVE-2022-4539Public exploit5.3 Medium
- miniorange malware scannerWordPress Malware Scanner plugin <= 4.7.1 - IP Restriction Bypass vulnerabilityCVE-2023-521765.3 Medium
- miniorange wordpress social login and register (discord, google, twitter, linkedin)WordPress Social Login, Social Sharing by miniOrange plugin <= 7.6.6 - Authenticated Privilege Escalation vulnerabilityCVE-2023-476838.0 High
- miniorange page restriction, cyberlord92 page and post restriction +1 morePage Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.4 - Protection Mechanism BypassCVE-2024-06815.3 Medium
- cyberlord92 malware scanner, miniorange web application firewall, cyberlord92 web application firewall – website security +2 moreMalware Scanner <= 4.7.2 and Web Application Firewall <= 2.1.1 - Unauthenticated Privilege EscalationCVE-2024-21729.8 Critical
- miniorange malware scannerWordPress Malware Scanner Plugin <= 4.7.2 is vulnerable to SQL InjectionCVE-2024-259027.6 High
- unknown web3, miniorange web3 - crypto wallet login \& nft token gating +1 moreWeb3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication BypassCVE-2023-6036Public exploit9.8 Critical
- cyberlord92 staff / employee business directory for active directory, miniorange staff \/ employee business directory for active directory +1 moreStaff / Employee Business Directory for Active Directory < 1.2.3 - Improper escaping of LDAP entriesCVE-2023-47575.4 Medium
- miniorange google authenticator, miniorange's google authenticator – wordpress two factor authentication – 2fa , two factor, otp sms and email | passwordless login +1 moreWordPress miniOrange's Google Authenticator Plugin <= 5.6.1 is vulnerable to Sensitive Data ExposureCVE-2022-445898.1 High
- miniorange google authenticator, cyberlord92 miniorange 2fa – two-factor authentication for wordpress (sms, email & google authenticator) +1 moreminiOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings ChangeCVE-2022-49437.5 High
- unknown active directory integration / ldap integration, miniorange active directory integration \/ ldap integration +1 moreActive Directory Integration < 4.1.10 - Unauthenticated Log DisclosureCVE-2023-5003Fix availableEPSS 26.6%7.5 High
- cyberlord92 active directory integration / ldap integration, miniorange active directory integration \/ ldap integration +1 moreActive Directory Integration / LDAP Integration <= 4.1.10 - LDAP PassbackCVE-2023-45062.2 Low
- cyberlord92 staff/employee business directory for active directory, miniorange staff \/ employee business directory for active directory +1 moreStaff / Employee Business Directory for Active Directory <= 1.2.3 - Authenticated (Admin+) LDAP PassbackCVE-2023-45052.2 Low
- miniorange prevent files / folders access, prevent files \/ folders access +1 morePrevent files / folders access < 2.5.2 - Admin+ Arbitrary File UploadCVE-2023-42387.2 High
- cyberlord92 yourmembership single sign on – ym sso login, minorange wordpress yourmembership single sign-on +1 moreWordPress YourMembership Single Sign On Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)CVE-2023-379865.9 Medium
- cyberlord92 oauth single sign on – sso (oauth client), miniorange oauth single sign on +1 moreWordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken AuthenticationCVE-2022-34155Public exploit8.8 High
- cyberlord92 web3 – crypto wallet login & nft token gating, miniorange web3 - crypto wallet login \& nft token gating +1 moreWeb3 – Crypto wallet Login & NFT token gating <= 2.6.0 - Authentication BypassCVE-2023-32499.8 Critical
- cyberlord92 active directory integration / ldap integration, miniorange active directory integration \/ ldap integration +1 moreActive Directory Integration / LDAP Integration <= 4.1.5 - Authenticated (Subscriber+) LDAP InjectionCVE-2023-34477.6 High
- cyberlord92 miniorange social login and register (discord, google, twitter, linkedin), miniorange wordpress social login and register \(discord\, google\, twitter\, linkedin\) +1 moreWordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication BypassCVE-2023-2982Public exploitEPSS 46.2%9.8 Critical
- cyberlord92 active directory integration / ldap integration, miniorange active directory integration \/ ldap integration +1 moreActive Directory Integration / LDAP Integration <= 4.1.4 - Cross-Site Request Forgery to SQL InjectionCVE-2023-25993.1 Low
- cyberlord92 active directory integration / ldap integration, miniorange active directory integration \/ ldap integration +1 moreActive Directory Integration / LDAP Integration <= 4.1.4 - Authenticated (Administrator+) SQL InjectionCVE-2023-24847.2 High
- miniorange wordpress social login and register (discord, google, twitter, linkedin), wordpress social login and register \(discord\, google\, twitter\, linkedin\) +1 moreWordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.5.14 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-237064.3 Medium
- unknown active directory integration / ldap integration, miniorange active directory integration \/ ldap integration +1 moreActive Directory Integration / LDAP Integration < 4.1.1 - Unauthenticated Data DisclosureCVE-2023-08127.5 High
- miniorange wordpress social login and register (discord, google, twitter, linkedin), wordpress social login and register \(discord\, google\, twitter\, linkedin\) +1 moreWordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 is vulnerable to Cross Site Scripting (XSS)CVE-2023-237105.9 Medium
- miniorange oauth single sign on enterprise, oauth single sign on free, oauth single sign on premium +2 more +4 moreOAuth Single Sign On - SSO (OAuth Client) - IdP Deletion via CSRFCVE-2023-10926.5 Medium
- miniorange oauth single sign onOAuth Single Sign On - SSO (OAuth Client) < 6.24.2 - IdP Discard via CSRFCVE-2023-10936.5 Medium
- miniorange wordpress saml sso premium, wordpress saml sso premium mulsitesite, wordpress saml sso standard +1 more +3 moreminiOrange WordPress SAML SSO multiple versions - Open Redirect in SSO loginCVE-2022-44966.1 Medium
- miniorange ldap integration with active directory and openldap - ntlm & kerberos login, ldap integration with active directory and openldap +1 moreExtension - miniorange - LDAP Integration - LDAP Injection (username)CVE-2023-237497.5 High
- miniorange login with cognitoLogin with Cognito <= 1.4.8 - Admin+ Stored XSSCVE-2022-42004.8 Medium
- miniorange wordpress rest api authentication, wordpress rest api authentication (wordpress plugin) +1 moreWordPress REST API Authentication plugin <= 2.4.0 - Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2022-450735.4 Medium
- miniorange google authenticator, miniorange's google authenticator (wordpress plugin) +1 moreWordPress miniOrange's Google Authenticator plugin <= 5.6.1 - Broken Access Control vulnerabilityCVE-2022-424615.4 Medium
- miniorange discord integration, unknown miniorange discord integration +1 moreminiOrange Discord Integration < 2.1.6 - Subscriber+ App DisablingCVE-2022-30826.5 Medium
- miniorange wp oauth server, wp oauth server (wordpress plugin) +1 moreWordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerabilityCVE-2022-341499.8 Critical
- miniorange oauth 2.0 client for sso, oauth 2.0 client for sso (wordpress plugin) +1 moreWordPress OAuth 2.0 client for SSO plugin <= 1.11.3 - Authentication Bypass vulnerabilityCVE-2022-348589.8 Critical
- miniorange oauth single sign on, cyberlord92 oauth single sign on – sso (oauth client) +1 moreOAuth Single Sign On < 6.22.6 - Authentication BypassCVE-2022-21335.3 Medium
- miniorange malware scannerminiOrange's Malware Scanner < 4.5.2 - Admin+ Stored Cross-Site ScriptingCVE-2022-19954.8 Medium
- unknown login with otp over sms, email, whatsapp and google authenticator, miniorange login with otp over sms\, email\, whatsapp and google authenticator +1 moreGoogle Authenticator < 1.0.8 - Admin+ Stored Cross-Site ScriptingCVE-2022-19944.8 Medium
- miniorange google authenticator, unknown miniorange's google authenticator – wordpress two factor authentication (2fa , two factor, otp sms and email) | passwordless login +1 moreminiOrange's Google Authenticator < 5.5.6 - Admin+ Stored Cross-Site ScriptingCVE-2022-13214.8 Medium
- automattic limit login attemptsLimit Login Attempts < 4.0.72 - Admin+ Stored Cross-Site ScriptingCVE-2022-10294.8 Medium
- miniorange wordpress security, unknown wordpress security – firewall, malware scanner, secure login and backup +1 moreWordPress Security < 4.2.1 - Admin+ Stored Cross-Site ScriptingCVE-2022-10284.8 Medium
- miniorange login using wordpress users, unknown login using wordpress users ( wp as saml idp ) +1 moreLogin using WordPress Users < 1.13.4 - Admin+ Stored Cross-Site ScriptingCVE-2022-10104.8 Medium
- miniorange google authenticatorminiOrange Google Authenticator < 1.0.5 - CSRF to Stored Cross-Site ScriptingCVE-2022-08754.3 Medium
- miniorange google authenticator, miniorange's google authenticator +1 moreminiOrange's Google Authenticator < 5.5 - Unauthenticated Arbitrary Options DeletionCVE-2022-02298.1 High
- miniorange samlSensitive Data Exposure in miniorange_samlCVE-2021-36786Fix available7.5 High
- miniorange samlCross-site Scripting in TYPO3 extensionCVE-2021-36785Fix available5.4 Medium
- miniorange saml sp single sign onUtilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows...CVE-2020-68506.1 Medium
- miniorange saml sp single sign onIn the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login...CVE-2019-123466.1 Medium