miniOrange 2FA – Two-Factor Authentication for WordPress (SMS, Email & Google Authenticator) vulnerabilities

Product

miniOrange 2FA – Two-Factor Authentication for WordPress (SMS, Email & Google Authenticator)

by cyberlord92 · last CVE Oct 20, 2023

CVEs

On KEV

5.3

Max CVSS

New 30D

Vulnerabilities1 In the news0 Timeline

Severity mix

Critical 0High 0Medium 1Low 0

Severity

All severities1 Critical0 High0 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add miniOrange 2FA – Two-Factor Authentication for WordPress (SMS, Email & Google Authenticator) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-4943	5.3	1%	Oct 20	miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change Affected: through 5.6.5