Security
فارسی
All products

miniorange-2-factor-authentication

WordPress · Plugin
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) 6.2.9 - 6.3.0 - Two-Factor Authentication BypassCVE-2026-111949 miniorange-2-factor-authentication WordPress Medium Fix reported
miniOrange 2FA <= 6.2.7 - Two-Factor Authentication Bypass via Brute ForceCVE-2026-16619 miniorange-2-factor-authentication WordPress Low Fix reported
miniOrange 2FA <= 6.2.6 - Two-Factor Authentication BypassCVE-2026-16036 miniorange-2-factor-authentication WordPress Medium Fix reported
miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) 6.2.8 - 6.3.0 - Unauthenticated Second Factor Authentication BypassCVE-2026-77771 miniorange-2-factor-authentication WordPress Medium Fix reported
miniOrange 2FA – Two Factor Authentication for WordPress 5.3.24 - 6.3.0 - Missing Authorization to Unauthenticated Arbitrary Option DeletionCVE-2026-77770 miniorange-2-factor-authentication WordPress High Fix reported
miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) < 6.2.6 - Two-Factor Authentication BypassCVE-2026-12695 miniorange-2-factor-authentication WordPress Medium Fix reported
miniOrange 2FA <= 6.2.6 - Missing AuthorizationCVE-2026-16035 miniorange-2-factor-authentication WordPress Medium Fix reported
miniOrange's Google Authenticator <= 6.1.1 - Missing AuthorizationCVE-2025-54745 miniorange-2-factor-authentication WordPress Medium Fix reported
miniOrange's Google Authenticator <= 5.4.39 - Cross-Site Scripting miniorange-2-factor-authentication WordPress Medium Fix reported
miniOrange's Google Authenticator <= 5.4.52 - Unauthenticated Arbitrary Options DeletionCVE-2022-0229 miniorange-2-factor-authentication WordPress High Fix reported
miniOrange's Google Authenticator <= 5.6.1 - Cross-Site Request Forgery to Malware Scan Termination miniorange-2-factor-authentication WordPress High Fix reported
miniOrange's Google Authenticator <= 5.5.7 - Reflected Cross-Site Scripting miniorange-2-factor-authentication WordPress Medium Fix reported
miniOrange's Google Authenticator <= 5.6.1 - Missing Authorization to Plugin Settings ChangeCVE-2022-42461 miniorange-2-factor-authentication WordPress Medium Fix reported
miniOrange's Google Authenticator <= 5.6.1 - Sensitive Data Exposure of Multifactor Backup CodesCVE-2022-44589 miniorange-2-factor-authentication WordPress High Fix reported
miniOrange's Google Authenticator <= 5.5.5 - Authenticated (Admin+) Cross-Site ScriptingCVE-2022-1321 miniorange-2-factor-authentication WordPress Medium Fix reported
miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings ChangeCVE-2022-4943 miniorange-2-factor-authentication WordPress High Fix reported
miniOrange's Google Authenticator <= 5.5.82 - Missing Authorization miniorange-2-factor-authentication WordPress Medium Fix reported