Login Request a demo
MI
Vendor
Miniorange
37 products with CVEs on record
79
CVEs
0
On KEV
5
New 30D
Products
MO
miniorange otp verification
miniOrange
9.8
4 CVEs0 on KEV1 new
WO
WP OAuth Server
miniOrange
9.8
3 CVEs0 on KEV1 new
OS
OAuth Single Sign On – SSO (OAuth Client)
miniOrange
9.8
2 CVEs0 on KEV1 new
PF
Prevent files / folders access
miniOrange
7.2
2 CVEs0 on KEV1 new
PR
Page Restriction WordPress (WP)
miniOrange
5.3
1 CVEs0 on KEV1 new
AD
Active Directory Integration / Ldap Integration
Miniorange
7.6
6 CVEs0 on KEV0 new
GA
Google Authenticator
Miniorange
8.8
6 CVEs0 on KEV0 new
M2
Miniorange 2fa
Miniorange
8.8
6 CVEs0 on KEV0 new
OS
Oauth Single Sign ON
Miniorange
8.8
4 CVEs0 on KEV0 new
SS
SAML SP Single Sign On
miniOrange
8.1
4 CVEs0 on KEV0 new
WS
WordPress Social Login and Register
miniOrange
7.1
4 CVEs0 on KEV0 new
HS
Headless Single Sign On
miniOrange
9.8
3 CVEs0 on KEV0 new
WS
Wordpress Social Login And Register (discord, Google, Twitter, Linkedin)
Miniorange
9.8
3 CVEs0 on KEV0 new
MS
Malware Scanner
Miniorange
7.2
2 CVEs0 on KEV0 new
OV
Otp Verification With Firebase
Miniorange
9.8
2 CVEs0 on KEV0 new
PR
Page Restriction
Miniorange
7.5
2 CVEs0 on KEV0 new
SA
Saml
Miniorange
7.5
2 CVEs0 on KEV0 new
SS
Saml Sso - Service Provider
Miniorange
7.4
2 CVEs0 on KEV0 new
SE
Staff / Employee Business Directory For Active Directory
Miniorange
5.4
2 CVEs0 on KEV0 new
WC
Web3 - Crypto Wallet Login & Nft Token Gating
Miniorange
9.8
2 CVEs0 on KEV0 new
BA
Backup and Restore
Miniorange
8.8
1 CVEs0 on KEV0 new
DI
Discord Integration
Miniorange
6.5
1 CVEs0 on KEV0 new
JA
JWT Authentication for WP REST APIs
miniOrange
6.5
1 CVEs0 on KEV0 new
LA
Ldap / Active Directory Integration
Miniorange
5.3
1 CVEs0 on KEV0 new
LI
Ldap Integration With Active Directory And Openldap
Miniorange
7.5
1 CVEs0 on KEV0 new
LL
Limit Login Attempts
Miniorange
4.8
1 CVEs0 on KEV0 new
LU
Login Using Wordpress Users
Miniorange
4.8
1 CVEs0 on KEV0 new
LW
Login With Cognito
Miniorange
4.8
1 CVEs0 on KEV0 new
LW
Login With Otp Over Sms, Email, Whatsapp And Google Authenticator
Miniorange
4.8
1 CVEs0 on KEV0 new
MD
miniOrange Discord Integration
miniOrange
8.1
1 CVEs0 on KEV0 new
MG
miniOrange's Google Authenticator
miniOrange
6.5
1 CVEs0 on KEV0 new
O2
Oauth 2.0 Client For Sso
Miniorange
9.8
1 CVEs0 on KEV0 new
OO
Oauth & Openid Connect Single Sign-on
Miniorange
6.1
1 CVEs0 on KEV0 new
SL
Social Login
Miniorange
9.8
1 CVEs0 on KEV0 new
WA
Web Application Firewall
Miniorange
5.3
1 CVEs0 on KEV0 new
WR
Wordpress Rest Api Authentication
Miniorange
8.8
1 CVEs0 on KEV0 new
WS
Wordpress Security
Miniorange
4.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114696
New
PR
Page Restriction WordPress (WP)
miniOrange
5.3
0%
Oct 22WordPress Page Restriction WordPress (WP) plugin <= 1.6.0 - Broken Access Control vulnerability
CVE-2026-107433
WO
WP OAuth Server
miniOrange
6.5
0%
Oct 14WordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerability
CVE-2026-106610
MO
miniorange otp verification
miniOrange
9.8
0%
Oct 10WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability
CVE-2026-97274
OS
OAuth Single Sign On – SSO (OAuth Client)
miniOrange
9.8
0%
Sep 30WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability
CVE-2026-97267
PF
Prevent files / folders access
miniOrange
4.3
0%
Sep 30WordPress Prevent files / folders access plugin <= 2.6.7 - Broken Access Control vulnerability
CVE-2026-62108
HS
Headless Single Sign On
miniOrange
9.8
1%
Sep 17WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability
CVE-2026-89027
JA
JWT Authentication for WP REST APIs
miniOrange
6.5
0%
Sep 15miniOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication Downgrade
CVE-2026-81205
LA
Ldap / Active Directory Integration
Miniorange
5.3
0%
Sep 2LDAP / Active Directory Integration - Moderately critical - Information Disclosure - SA-CONTRIB-2026-115
CVE-2026-82229
WS
WordPress Social Login and Register
miniOrange
7.1
0%
Aug 31WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73351
WS
WordPress Social Login and Register
miniOrange
7.1
0%
Aug 18WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-61979
SS
SAML SP Single Sign On
miniOrange
8.1
0%
Aug 13WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability
CVE-2026-61967
MO
miniorange otp verification
miniOrange
9.8
0%
Aug 13WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerability
CVE-2026-28149
HS
Headless Single Sign On
miniOrange
9.8
1%
Aug 13WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability
CVE-2026-28148
HS
Headless Single Sign On
miniOrange
9.8
0%
Aug 13WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability
CVE-2026-28008
OS
OAuth Single Sign On – SSO (OAuth Client)
miniOrange
9.8
1%
Aug 13WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability
CVE-2026-65520
WO
WP OAuth Server
miniOrange
9.3
0%
Aug 6WordPress WP OAuth Server plugin <= 6.2.0 - SQL Injection vulnerability
CVE-2026-61957
MO
miniorange otp verification
miniOrange
7.1
0%
Jul 27WordPress miniorange otp verification plugin <= 5.5.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65561
WS
WordPress Social Login and Register
miniOrange
6.5
0%
Jul 27WordPress WordPress Social Login and Register plugin <= 7.8.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-59545
MD
miniOrange Discord Integration
miniOrange
8.1
0%
Jul 23WordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerability
CVE-2026-5343
SS
Saml Sso - Service Provider
Miniorange
7.4
0%
May 28SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031
CVE-2026-42731
MO
miniorange otp verification
miniOrange
9.8
0%
May 27WordPress miniorange otp verification plugin <= 5.4.9 - Privilege Escalation vulnerability
CVE-2021-47979
BA
Backup and Restore
Miniorange
8.8
0%
May 16WordPress Plugin Backup and Restore 1.0.3 Arbitrary File Deletion
CVE-2026-3217
SS
Saml Sso - Service Provider
Miniorange
6.1
0%
Mar 25SAML SSO - Service Provider - Critical - Cross-site scripting - SA-CONTRIB-2026-018
CVE-2025-68974
WS
WordPress Social Login and Register
miniOrange
6.6
0%
Dec 30WordPress WordPress Social Login and Register plugin <= 7.7.0 - Local File Inclusion vulnerability
CVE-2025-54745
MG
miniOrange's Google Authenticator
miniOrange
6.5
0%
Dec 18WordPress miniOrange's Google Authenticator Plugin <= 6.1.1 - Broken Access Control Vulnerability
CVE-2025-6675
M2
Miniorange 2fa
Miniorange
4.8
0%
Jun 26Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA -…
CVE-2025-47710
M2
Miniorange 2fa
Miniorange
7.4
0%
May 14Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA -…
CVE-2025-47709
M2
Miniorange 2fa
Miniorange
6.5
0%
May 14Missing Authorization vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Forceful Browsing.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0,…
CVE-2025-47708
M2
Miniorange 2fa
Miniorange
8.8
0%
May 14Cross-Site Request Forgery (CSRF) vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Cross Site Request Forgery.This issue affects Enterprise MFA - TFA for Drupal:…
CVE-2025-47707
M2
Miniorange 2fa
Miniorange
7.5
0%
May 14Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA -…
CVE-2025-47706
M2
Miniorange 2fa
Miniorange
4.8
0%
May 14Authentication Bypass by Capture-replay vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Remote Services with Stolen Credentials.This issue affects Enterprise MFA -…
CVE-2024-11087
SL
Social Login
Miniorange
9.8
0%
Mar 8The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon plugin for WordPress is vulnerable to authentication bypass in all versions up to, and…
CVE-2024-13301
OO
Oauth & Openid Connect Single Sign-on
Miniorange
6.1
0%
Jan 9OAuth & OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) - Critical - Cross Site Scripting - SA-CONTRIB-2024-067
CVE-2024-11297
PR
Page Restriction
Miniorange
7.5
1%
Dec 20Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
CVE-2024-9862
OV
Otp Verification With Firebase
Miniorange
9.8
1%
Oct 17The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 3.6.0
CVE-2024-9861
OV
Otp Verification With Firebase
Miniorange
8.1
1%
Oct 17The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.6.0
CVE-2022-4539
WA
Web Application Firewall
Miniorange
5.3
1%
Aug 31The Web Application Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.1.2
CVE-2024-0681
PR
Page Restriction
Miniorange
5.3
1%
Mar 13The Page Restriction WordPress (WP) – Protect WP Pages/Post plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.3.4
CVE-2024-25902
MS
Malware Scanner
Miniorange
7.2
1%
Feb 28Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in miniorange Malware Scanner.This issue affects Malware Scanner: from n/a…
CVE-2023-6036
WC
Web3 - Crypto Wallet Login & Nft Token Gating
Miniorange
9.8
2%
Feb 12The Web3 WordPress plugin before 3.0.0 is vulnerable to an authentication bypass due to incorrect authentication checking in the login flow in functions 'handle_auth_request' and…
CVE-2023-4757
SE
Staff / Employee Business Directory For Active Directory
Miniorange
5.4
0%
Jan 16The Staff / Employee Business Directory for Active Directory WordPress plugin before 1.2.3 does not sanitize and escape data returned from the LDAP server before rendering it in…
CVE-2022-44589
GA
Google Authenticator
Miniorange
7.5
1%
Dec 29Exposure of Sensitive Information to an Unauthorized Actor vulnerability in miniOrange miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor,…
CVE-2022-4943
GA
Google Authenticator
Miniorange
5.3
1%
Oct 20The miniOrange's Google Authenticator plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when changing plugin settings in versions up to,…
CVE-2023-5003
AD
Active Directory Integration / Ldap Integration
Miniorange
7.5
27%
Oct 16The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an administrator wants to export said logs
CVE-2023-4506
AD
Active Directory Integration / Ldap Integration
Miniorange
6.5
1%
Sep 27The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 4.1.10
CVE-2023-4505
SE
Staff / Employee Business Directory For Active Directory
Miniorange
4.9
1%
Sep 27The Staff / Employee Business Directory for Active Directory plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 1.2.3
CVE-2023-4238
PF
Prevent Files / Folders Access
Miniorange
7.2
2%
Sep 25The Prevent files / folders access WordPress plugin before 2.5.2 does not validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the…
CVE-2022-34155
OS
Oauth Single Sign ON
Miniorange
8.8
1%
Jul 18Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) plugin allows Authentication Bypass.This issue affects OAuth Single Sign On – SSO…
CVE-2023-3249
WC
Web3 - Crypto Wallet Login & Nft Token Gating
Miniorange
9.8
1%
Jun 30The Web3 – Crypto wallet Login & NFT token gating plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.6.0
CVE-2023-3447
AD
Active Directory Integration / Ldap Integration
Miniorange
7.6
1%
Jun 29The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Injection in versions up to, and including, 4.1.5
CVE-2023-2982
WS
Wordpress Social Login And Register (discord, Google, Twitter, Linkedin)
Miniorange
9.8
46%
Jun 29The WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4
CVE-2023-2599
AD
Active Directory Integration / Ldap Integration
Miniorange
6.5
0%
Jun 9The Active Directory Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via the orderby and order parameters in…
CVE-2023-2484
AD
Active Directory Integration / Ldap Integration
Miniorange
4.9
1%
Jun 9The Active Directory Integration plugin for WordPress is vulnerable to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 4.1.4 due to…
CVE-2023-23706
WS
Wordpress Social Login And Register (discord, Google, Twitter, Linkedin)
Miniorange
8.8
0%
May 23Cross-Site Request Forgery (CSRF) vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 versions
CVE-2023-0812
AD
Active Directory Integration / Ldap Integration
Miniorange
7.5
1%
May 15The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to…
CVE-2023-23710
WS
Wordpress Social Login And Register (discord, Google, Twitter, Linkedin)
Miniorange
4.8
0%
Apr 25Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 versions
CVE-2023-1093
OS
Oauth Single Sign ON
Miniorange
6.5
0%
Mar 27The OAuth Single Sign On WordPress plugin before 6.24.2 does not have CSRF checks when discarding Identify providers (IdP), which could allow attackers to make logged in admins…
CVE-2023-1092
OS
Oauth Single Sign ON
Miniorange
6.5
0%
Mar 27The OAuth Single Sign On Free WordPress plugin before 6.24.2, OAuth Single Sign On Standard WordPress plugin before 28.4.9, OAuth Single Sign On Premium WordPress plugin before…
CVE-2022-4496
SS
Saml SP Single Sign ON
Miniorange
6.1
1%
Jan 30The SAML SSO Standard WordPress plugin version 16.0.0 before 16.0.8, SAML SSO Premium WordPress plugin version 12.0.0 before 12.1.0 and SAML SSO Premium Multisite WordPress plugin…
CVE-2023-23749
LI
Ldap Integration With Active Directory And Openldap
Miniorange
7.5
1%
Jan 17The 'LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login' extension is vulnerable to LDAP Injection since is not properly sanitizing the 'username' POST…