cyberlord92 vulnerabilities | LiveThreat CVE Feed

CVE	Product	CVSS	EPSS	Published	Summary
CVE-2026-103895	MO miniOrange OTP Login, Verification and SMS Notifications cyberlord92	8.1	0%	Oct 16	miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace State
CVE-2026-85984	MO miniOrange OTP Login, Verification and SMS Notifications cyberlord92	9.8	1%	Sep 26	miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter
CVE-2026-75807	SS SAML Single Sign On – SSO Login cyberlord92	7.5	0%	Aug 29	SAML Single Sign On <= 5.4.6 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning
CVE-2026-12000	PA Page and Post Restriction cyberlord92	7.5	1%	Aug 5	Page and Post Restriction <= 1.4.1 - Unauthenticated Missing Authorization to Sensitive Information Exposure via REST API
CVE-2026-15981	SS SAML Single Sign On – SSO Login cyberlord92	9.8	1%	Jul 23	SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter
CVE-2026-15013	SS SAML Single Sign On – SSO Login cyberlord92	9.8	2%	Jul 16	SAML Single Sign On <= 5.4.3 - Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusion
CVE-2026-12761	MS miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) cyberlord92	9.8	1%	Jul 10	miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP Flow
CVE-2026-14245	MO miniOrange OTP Login, Verification and SMS Notifications cyberlord92	9.8	1%	Jul 9	miniOrange OTP Login, Verification and SMS Notifications <= 5.5.1 - Authentication Bypass to Administrator Account Takeover via 'username_b' Parameter
CVE-2026-2628	AM All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login cyberlord92	9.8	1%	Mar 3	All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypass
CVE-2026-1279	ED Employee Directory – Staff Directory and Listing cyberlord92	6.4	0%	Feb 6	Employee Directory <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form_title' Shortcode Attribute
CVE-2025-10753	OS OAuth Single Sign On – SSO (OAuth Client) cyberlord92	5.3	0%	Feb 6	OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 - Missing Authorization
CVE-2026-0725	ID Integrate Dynamics 365 CRM cyberlord92	4.4	0%	Jan 17	Integrate Dynamics 365 CRM <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Field Mapping Configuration
CVE-2025-14948	MO miniOrange OTP Verification and SMS Notification for WooCommerce cyberlord92	5.3	0%	Jan 10	miniOrange OTP Verification and SMS Notification for WooCommerce <= 4.3.8 - Missing Authorization to Unauthenticated Notification Settings Modification
CVE-2025-12822	WL WP Login and Register using JWT cyberlord92	4.3	0%	Nov 19	WP Login and Register using JWT <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) API Key Exposure
CVE-2025-11255	PP Password Policy Manager \| Password Manager cyberlord92	4.3	0%	Oct 25	Password Policy Manager \| Password Manager <= 2.0.5 - Missing Authorization to Authenticated (Subscriber+) Configuration Log Out
CVE-2025-10750	PE PowerBI Embed Reports cyberlord92	5.3	0%	Oct 18	PowerBI Embed Reports <= 1.2.0 - Unauthenticated Sensitive Information Disclosure
CVE-2025-10648	LW Login with YourMembership – YM SSO Login cyberlord92	5.3	0%	Oct 15	Login with YourMembership - YM SSO Login <= 1.1.7 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'moym_display_test_attributes'
CVE-2025-9485	OS OAuth Single Sign On – SSO (OAuth Client) cyberlord92	9.8	1%	Oct 4	OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()
CVE-2025-10746	ID Integrate Dynamics 365 CRM cyberlord92	6.5	0%	Oct 4	Integrate Dynamics 365 CRM <= 1.0.9 - Missing Authorization
CVE-2025-10752	OS OAuth Single Sign On – SSO (OAuth Client) cyberlord92	4.3	0%	Sep 26	OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Cross-Site Request Forgery
CVE-2025-7665	MO Miniorange OTP Verification with Firebase cyberlord92	8.1	0%	Sep 19	Miniorange OTP Verification with Firebase 3.1.0 - 3.6.2 - Unauthenticated Privilege Escalation
CVE-2025-9891	US User Sync cyberlord92	4.3	0%	Sep 17	User Sync – Remote User Sync <= 1.0.2 - Cross-Site Request Forgery to Plugin Deactivation
CVE-2025-8420	ED Employee Directory – Staff Directory and Listing cyberlord92	8.1	1%	Aug 6	Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution
CVE-2025-6003	WS WordPress Single Sign-On (SSO) - Single Site Standard cyberlord92	5.3	0%	Jun 12	WordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure
CVE-2024-11087	MS miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) cyberlord92	9.8	0%	Mar 8	miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon <= 200.3.9 - Authentication Bypass
CVE-2023-46082	BL Broken Link Checker \| Finder Cyberlord92	5.3	0%	Jan 2	WordPress Broken Link Checker \| Finder plugin <= 2.4.2 - Broken Access Control vulnerability
CVE-2024-11297	PA Page and Post Restriction cyberlord92	7.5	1%	Dec 20	Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
CVE-2024-12121	BL Broken Link Checker \| Finder cyberlord92	5.4	0%	Dec 19	Broken Link Checker \| Finder <= 2.5.0 - Authenticated (Author+) Blind Server-Side Request Forgery
CVE-2024-10111	OS OAuth Single Sign On – SSO (OAuth Client) cyberlord92	8.1	1%	Dec 12	OAuth Single Sign On – SSO (OAuth Client) <= 6.26.3 - Authentication Bypass
CVE-2024-11901	PE PowerBI Embed Reports cyberlord92	6.4	0%	Dec 12	PowerBI Embed Reports <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-9887	SI SAML IDP (Identity Provider) – Login with Website Users cyberlord92	7.2	1%	Nov 16	Login using WordPress Users ( WP as SAML IDP ) <= 1.15.6 - Authenticated (Administrator+) SQL Injection