Login Request a demo
MO
Product
miniOrange OTP Login, Verification and SMS Notifications
by cyberlord92 · last CVE Oct 16, 2026
3
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 2High 1Medium 0Low 0
Severity
All severities3Critical2High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add miniOrange OTP Login, Verification and SMS Notifications to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-85984
9.8
1%
Sep 26
miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter
Affected: through 5.5.5
CVE-2026-14245
9.8
1%
Jul 9
miniOrange OTP Login, Verification and SMS Notifications <= 5.5.1 - Authentication Bypass to Administrator Account Takeover via 'username_b' Parameter
Affected: through 5.5.1
CVE-2026-103895
8.1
0%
Oct 16
miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace State
Affected: through 5.5.8
Showing 3