CY
Vendor
cyberlord92
46
CVEs
0
On KEV
1
New 30D
Products
MO9.8
miniOrange OTP Login, Verification and SMS Notifications
cyberlord92
3 CVEs0 on KEV1 new
MO9.8
Miniorange OTP Verification with Firebase
cyberlord92
4 CVEs0 on KEV0 new
OS9.8
OAuth Single Sign On – SSO (OAuth Client)
cyberlord92
4 CVEs0 on KEV0 new
PA7.5
Page and Post Restriction
cyberlord92
3 CVEs0 on KEV0 new
SS9.8
SAML Single Sign On – SSO Login
cyberlord92
3 CVEs0 on KEV0 new
BL5.4
Broken Link Checker | Finder
cyberlord92
2 CVEs0 on KEV0 new
ED8.1
Employee Directory – Staff Directory and Listing
cyberlord92
2 CVEs0 on KEV0 new
ID6.5
Integrate Dynamics 365 CRM
cyberlord92
2 CVEs0 on KEV0 new
MS9.8
miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn)
cyberlord92
2 CVEs0 on KEV0 new
PE6.4
PowerBI Embed Reports
cyberlord92
2 CVEs0 on KEV0 new
WA9.8
Web Application Firewall – website security
cyberlord92
2 CVEs0 on KEV0 new
AM9.8
All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login
cyberlord92
1 CVEs0 on KEV0 new
LU7.2
Login Using Wordpress Users
Cyberlord92
1 CVEs0 on KEV0 new
LW5.3
Login with YourMembership – YM SSO Login
cyberlord92
1 CVEs0 on KEV0 new
MS9.8
Malware Scanner
cyberlord92
1 CVEs0 on KEV0 new
M25.3
miniOrange 2FA – Two-Factor Authentication for WordPress (SMS, Email & Google Authenticator)
cyberlord92
1 CVEs0 on KEV0 new
MO5.3
miniOrange OTP Verification and SMS Notification for WooCommerce
cyberlord92
1 CVEs0 on KEV0 new
PP4.3
Password Policy Manager | Password Manager
cyberlord92
1 CVEs0 on KEV0 new
SI7.2
SAML IDP (Identity Provider) – Login with Website Users
cyberlord92
1 CVEs0 on KEV0 new
US4.3
User Sync
cyberlord92
1 CVEs0 on KEV0 new
WS5.3
WordPress Single Sign-On (SSO) - Multisite All-Inclusive
cyberlord92
1 CVEs0 on KEV0 new
WS5.3
WordPress Single Sign-On (SSO) - Multisite Enterprise
cyberlord92
1 CVEs0 on KEV0 new
WS5.3
WordPress Single Sign-On (SSO) - Multisite Premium
cyberlord92
1 CVEs0 on KEV0 new
WS5.3
WordPress Single Sign-On (SSO) - Single Site All-Inclusive
cyberlord92
1 CVEs0 on KEV0 new
WS5.3
WordPress Single Sign-On (SSO) - Single Site Enterprise
cyberlord92
1 CVEs0 on KEV0 new
WS5.3
WordPress Single Sign-On (SSO) - Single Site Premium
cyberlord92
1 CVEs0 on KEV0 new
WS5.3
WordPress Single Sign-On (SSO) - Single Site Standard
cyberlord92
1 CVEs0 on KEV0 new
WL4.3
WP Login and Register using JWT
cyberlord92
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103895 | MO miniOrange OTP Login, Verification and SMS Notifications cyberlord92 | 8.1 | Oct 16 | miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace State |
| CVE-2026-85984 | MO miniOrange OTP Login, Verification and SMS Notifications cyberlord92 | 9.8 | Sep 26 | miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter |
| CVE-2026-75807 | SS SAML Single Sign On – SSO Login cyberlord92 | 7.5 | Aug 29 | SAML Single Sign On <= 5.4.6 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning |
| CVE-2026-12000 | PA Page and Post Restriction cyberlord92 | 7.5 | Aug 5 | Page and Post Restriction <= 1.4.1 - Unauthenticated Missing Authorization to Sensitive Information Exposure via REST API |
| CVE-2026-15981 | SS SAML Single Sign On – SSO Login cyberlord92 | 9.8 | Jul 23 | SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter |
| CVE-2026-15013 | SS SAML Single Sign On – SSO Login cyberlord92 | 9.8 | Jul 16 | SAML Single Sign On <= 5.4.3 - Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusion |
| CVE-2026-12761 | MS miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) cyberlord92 | 9.8 | Jul 10 | miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP Flow |
| CVE-2026-14245 | MO miniOrange OTP Login, Verification and SMS Notifications cyberlord92 | 9.8 | Jul 9 | miniOrange OTP Login, Verification and SMS Notifications <= 5.5.1 - Authentication Bypass to Administrator Account Takeover via 'username_b' Parameter |
| CVE-2026-2628 | AM All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login cyberlord92 | 9.8 | Mar 3 | All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypass |
| CVE-2026-1279 | ED Employee Directory – Staff Directory and Listing cyberlord92 | 6.4 | Feb 6 | Employee Directory <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form_title' Shortcode Attribute |
| CVE-2025-10753 | OS OAuth Single Sign On – SSO (OAuth Client) cyberlord92 | 5.3 | Feb 6 | OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 - Missing Authorization |
| CVE-2026-0725 | ID Integrate Dynamics 365 CRM cyberlord92 | 4.4 | Jan 17 | Integrate Dynamics 365 CRM <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Field Mapping Configuration |
| CVE-2025-14948 | MO miniOrange OTP Verification and SMS Notification for WooCommerce cyberlord92 | 5.3 | Jan 10 | miniOrange OTP Verification and SMS Notification for WooCommerce <= 4.3.8 - Missing Authorization to Unauthenticated Notification Settings Modification |
| CVE-2025-12822 | WL WP Login and Register using JWT cyberlord92 | 4.3 | Nov 19 | WP Login and Register using JWT <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) API Key Exposure |
| CVE-2025-11255 | PP Password Policy Manager | Password Manager cyberlord92 | 4.3 | Oct 25 | Password Policy Manager | Password Manager <= 2.0.5 - Missing Authorization to Authenticated (Subscriber+) Configuration Log Out |
| CVE-2025-10750 | PE PowerBI Embed Reports cyberlord92 | 5.3 | Oct 18 | PowerBI Embed Reports <= 1.2.0 - Unauthenticated Sensitive Information Disclosure |
| CVE-2025-10648 | LW Login with YourMembership – YM SSO Login cyberlord92 | 5.3 | Oct 15 | Login with YourMembership - YM SSO Login <= 1.1.7 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'moym_display_test_attributes' |
| CVE-2025-9485 | OS OAuth Single Sign On – SSO (OAuth Client) cyberlord92 | 9.8 | Oct 4 | OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token() |
| CVE-2025-10746 | ID Integrate Dynamics 365 CRM cyberlord92 | 6.5 | Oct 4 | Integrate Dynamics 365 CRM <= 1.0.9 - Missing Authorization |
| CVE-2025-10752 | OS OAuth Single Sign On – SSO (OAuth Client) cyberlord92 | 4.3 | Sep 26 | OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Cross-Site Request Forgery |
| CVE-2025-7665 | MO Miniorange OTP Verification with Firebase cyberlord92 | 8.1 | Sep 19 | Miniorange OTP Verification with Firebase 3.1.0 - 3.6.2 - Unauthenticated Privilege Escalation |
| CVE-2025-9891 | US User Sync cyberlord92 | 4.3 | Sep 17 | User Sync – Remote User Sync <= 1.0.2 - Cross-Site Request Forgery to Plugin Deactivation |
| CVE-2025-8420 | ED Employee Directory – Staff Directory and Listing cyberlord92 | 8.1 | Aug 6 | Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution |
| CVE-2025-6003 | WS WordPress Single Sign-On (SSO) - Single Site Enterprise cyberlord92 | 5.3 | Jun 12 | WordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure |
| CVE-2024-11087 | MS miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) cyberlord92 | 9.8 | Mar 8 | miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon <= 200.3.9 - Authentication Bypass |
| CVE-2023-46082 | BL Broken Link Checker | Finder Cyberlord92 | 5.3 | Jan 2 | WordPress Broken Link Checker | Finder plugin <= 2.4.2 - Broken Access Control vulnerability |
| CVE-2024-11297 | PA Page and Post Restriction cyberlord92 | 7.5 | Dec 20 | Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure |
| CVE-2024-12121 | BL Broken Link Checker | Finder cyberlord92 | 5.4 | Dec 19 | Broken Link Checker | Finder <= 2.5.0 - Authenticated (Author+) Blind Server-Side Request Forgery |
| CVE-2024-10111 | OS OAuth Single Sign On – SSO (OAuth Client) cyberlord92 | 8.1 | Dec 12 | OAuth Single Sign On – SSO (OAuth Client) <= 6.26.3 - Authentication Bypass |
| CVE-2024-11901 | PE PowerBI Embed Reports cyberlord92 | 6.4 | Dec 12 | PowerBI Embed Reports <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-9887 | SI SAML IDP (Identity Provider) – Login with Website Users cyberlord92 | 7.2 | Nov 16 | Login using WordPress Users ( WP as SAML IDP ) <= 1.15.6 - Authenticated (Administrator+) SQL Injection |
| CVE-2024-9863 | MO Miniorange OTP Verification with Firebase cyberlord92 | 9.8 | Oct 17 | Miniorange OTP Verification with Firebase <= 3.6.0 - Privilege Escalation via Registration due to Administrator Default User Role Value |
| CVE-2024-9862 | MO Miniorange OTP Verification with Firebase cyberlord92 | 9.8 | Oct 17 | Miniorange OTP Verification with Firebase <= 3.6.0 - Unauthenticated Arbitrary User Password Change |
| CVE-2024-9861 | MO Miniorange OTP Verification with Firebase cyberlord92 | 8.1 | Oct 17 | Miniorange OTP Verification with Firebase <= 3.6.0 - Authentication Bypass |
| CVE-2022-4539 | WA Web Application Firewall – website security cyberlord92 | 5.3 | Aug 31 | Web Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass |
| CVE-2024-0681 | PA Page and Post Restriction cyberlord92 | 5.3 | Mar 13 | Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.4 - Protection Mechanism Bypass |
| CVE-2024-2172 | WA Web Application Firewall – website security cyberlord92 | 9.8 | Mar 13 | Malware Scanner <= 4.7.2 and Web Application Firewall <= 2.1.1 - Unauthenticated Privilege Escalation |
| CVE-2022-4943 | M2 miniOrange 2FA – Two-Factor Authentication for WordPress (SMS, Email & Google Authenticator) cyberlord92 | 5.3 | Oct 20 | miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change |