All products

miniorange-otp-verification

WordPress · Plugin
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace StateCVE-2026-103895 miniorange-otp-verification WordPress High Fix reported
miniOrange OTP Login, Verification and SMS Notifications <= 5.5.7 - Unauthenticated Privilege EscalationCVE-2026-106610 miniorange-otp-verification WordPress High Fix reported
miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' ParameterCVE-2026-85984 miniorange-otp-verification WordPress Critical Fix reported
miniOrange OTP Login, Verification and SMS Notifications <= 5.5.1 - Unauthenticated Privilege EscalationCVE-2026-61967 miniorange-otp-verification WordPress Critical Fix reported
miniorange otp verification <= 5.5.1 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-61957 miniorange-otp-verification WordPress High Fix reported
miniOrange OTP Login, Verification and SMS Notifications <= 5.5.1 - Authentication Bypass to Administrator Account Takeover via 'username_b' ParameterCVE-2026-14245 miniorange-otp-verification WordPress Critical Fix reported
miniOrange OTP Login, Verification and SMS Notifications <= 5.4.9 - Unauthenticated Privilege EscalationCVE-2026-42731 miniorange-otp-verification WordPress Critical Fix reported
miniorange otp verification <= 4.2.1 - Missing Authorization via dismiss_noticeCVE-2023-47776 miniorange-otp-verification WordPress Medium Fix reported