Unknown Authenticator vulnerabilities

• unknown google authenticator Google Authenticator < 0.56 - 2FA Secret Overwrite via CSRF CVE-2026-14204 6.5 MediumAugust 6, 2026
• authenticator Secret encryption vulnerable to brute-force attacks CVE-2024-45394 8.8 HighSeptember 3, 2024
• authenticator project authenticator Authenticator < 1.3.1 - Subscriber+ Denial of Service via Feed Token Disclosure CVE-2022-3994 4.3 MediumJanuary 2, 2023
• unknown login with otp over sms, email, whatsapp and google authenticator, miniorange login with otp over sms\, email\, whatsapp and google authenticator +1 more Google Authenticator < 1.0.8 - Admin+ Stored Cross-Site Scripting CVE-2022-1994 4.8 MediumJune 27, 2022
• miniorange google authenticator, unknown miniorange's google authenticator – wordpress two factor authentication (2fa , two factor, otp sms and email) | passwordless login +1 more miniOrange's Google Authenticator < 5.5.6 - Admin+ Stored Cross-Site Scripting CVE-2022-1321 4.8 MediumJune 27, 2022
• miniorange google authenticator miniOrange Google Authenticator < 1.0.5 - CSRF to Stored Cross-Site Scripting CVE-2022-0875 4.3 MediumJune 27, 2022
• miniorange google authenticator, miniorange's google authenticator +1 more miniOrange's Google Authenticator < 5.5 - Unauthenticated Arbitrary Options Deletion CVE-2022-0229 8.1 HighMarch 21, 2022