Login Request a demo
MI
Vendor
Miniorange
41 products with CVEs on record
93
CVEs
0
On KEV
5
New 30D
Products
MO
miniorange otp verification
miniOrange
9.8
5 CVEs0 on KEV1 new
WO
WP OAuth Server
miniOrange
9.8
3 CVEs0 on KEV1 new
OS
OAuth Single Sign On – SSO (OAuth Client)
miniOrange
9.8
2 CVEs0 on KEV1 new
PF
Prevent files / folders access
miniOrange
7.2
3 CVEs0 on KEV1 new
PR
Page Restriction WordPress (WP)
miniOrange
5.3
1 CVEs0 on KEV1 new
AD
Active Directory Integration / Ldap Integration
Miniorange
7.6
6 CVEs0 on KEV0 new
GA
Google Authenticator
Miniorange
8.8
6 CVEs0 on KEV0 new
M2
Miniorange 2fa
Miniorange
8.8
6 CVEs0 on KEV0 new
SS
SAML SP Single Sign On
miniOrange
8.1
5 CVEs0 on KEV0 new
WS
WordPress Social Login and Register
miniOrange
8.1
5 CVEs0 on KEV0 new
WS
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn)
miniOrange
9.8
5 CVEs0 on KEV0 new
OS
Oauth Single Sign ON
Miniorange
8.8
4 CVEs0 on KEV0 new
HS
Headless Single Sign On
miniOrange
9.8
3 CVEs0 on KEV0 new
CA
Custom API for WP
miniOrange
9.9
2 CVEs0 on KEV0 new
MS
Malware Scanner
Miniorange
7.2
2 CVEs0 on KEV0 new
MD
miniOrange Discord Integration
miniOrange
8.1
2 CVEs0 on KEV0 new
OV
Otp Verification
Miniorange
9.8
2 CVEs0 on KEV0 new
OV
Otp Verification With Firebase
Miniorange
9.8
2 CVEs0 on KEV0 new
PR
Page Restriction
Miniorange
7.5
2 CVEs0 on KEV0 new
SA
Saml
Miniorange
7.5
2 CVEs0 on KEV0 new
SS
Saml Sso - Service Provider
Miniorange
7.4
2 CVEs0 on KEV0 new
SE
Staff / Employee Business Directory For Active Directory
Miniorange
5.4
2 CVEs0 on KEV0 new
WC
Web3 - Crypto Wallet Login & Nft Token Gating
Miniorange
9.8
2 CVEs0 on KEV0 new
WR
WordPress REST API Authentication
miniOrange
8.8
2 CVEs0 on KEV0 new
BA
Backup and Restore
Miniorange
8.8
1 CVEs0 on KEV0 new
DI
Discord Integration
Miniorange
6.5
1 CVEs0 on KEV0 new
JA
JWT Authentication for WP REST APIs
miniOrange
6.5
1 CVEs0 on KEV0 new
LA
Ldap / Active Directory Integration
Miniorange
5.3
1 CVEs0 on KEV0 new
LI
Ldap Integration With Active Directory And Openldap
Miniorange
7.5
1 CVEs0 on KEV0 new
LL
Limit Login Attempts
Miniorange
4.8
1 CVEs0 on KEV0 new
LU
Login Using Wordpress Users
Miniorange
4.8
1 CVEs0 on KEV0 new
LW
Login With Cognito
Miniorange
4.8
1 CVEs0 on KEV0 new
LW
Login With Otp Over Sms, Email, Whatsapp And Google Authenticator
Miniorange
4.8
1 CVEs0 on KEV0 new
MG
miniOrange's Google Authenticator
miniOrange
6.5
1 CVEs0 on KEV0 new
O2
Oauth 2.0 Client For Sso
Miniorange
9.8
1 CVEs0 on KEV0 new
OO
Oauth & Openid Connect Single Sign-on
Miniorange
6.1
1 CVEs0 on KEV0 new
PP
Password Policy Manager
miniOrange
8.8
1 CVEs0 on KEV0 new
SL
Social Login
Miniorange
9.8
1 CVEs0 on KEV0 new
WA
Web Application Firewall
Miniorange
5.3
1 CVEs0 on KEV0 new
WS
Wordpress Security
Miniorange
4.8
1 CVEs0 on KEV0 new
YS
YourMembership Single Sign On
miniOrange
6.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114696
PR
Page Restriction WordPress (WP)
miniOrange
5.3
0%
Oct 22WordPress Page Restriction WordPress (WP) plugin <= 1.6.0 - Broken Access Control vulnerability
CVE-2026-107433
WO
WP OAuth Server
miniOrange
6.5
0%
Oct 14WordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerability
CVE-2026-106610
MO
miniorange otp verification
miniOrange
9.8
0%
Oct 10WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability
CVE-2026-97274
OS
OAuth Single Sign On – SSO (OAuth Client)
miniOrange
9.8
0%
Sep 30WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability
CVE-2026-97267
PF
Prevent files / folders access
miniOrange
4.3
0%
Sep 30WordPress Prevent files / folders access plugin <= 2.6.7 - Broken Access Control vulnerability
CVE-2026-62108
HS
Headless Single Sign On
miniOrange
9.8
1%
Sep 17WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability
CVE-2026-89027
JA
JWT Authentication for WP REST APIs
miniOrange
6.5
0%
Sep 15miniOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication Downgrade
CVE-2026-81205
LA
Ldap / Active Directory Integration
Miniorange
5.3
0%
Sep 2LDAP / Active Directory Integration - Moderately critical - Information Disclosure - SA-CONTRIB-2026-115
CVE-2026-82229
WS
WordPress Social Login and Register
miniOrange
7.1
0%
Aug 31WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73351
WS
WordPress Social Login and Register
miniOrange
7.1
0%
Aug 18WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-61979
SS
SAML SP Single Sign On
miniOrange
8.1
0%
Aug 13WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability
CVE-2026-61967
MO
miniorange otp verification
miniOrange
9.8
0%
Aug 13WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerability
CVE-2026-28149
HS
Headless Single Sign On
miniOrange
9.8
1%
Aug 13WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability
CVE-2026-28148
HS
Headless Single Sign On
miniOrange
9.8
0%
Aug 13WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability
CVE-2026-28008
OS
OAuth Single Sign On – SSO (OAuth Client)
miniOrange
9.8
1%
Aug 13WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability
CVE-2026-65520
WO
WP OAuth Server
miniOrange
9.3
0%
Aug 6WordPress WP OAuth Server plugin <= 6.2.0 - SQL Injection vulnerability
CVE-2026-61957
MO
miniorange otp verification
miniOrange
7.1
0%
Jul 27WordPress miniorange otp verification plugin <= 5.5.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-65561
WS
WordPress Social Login and Register
miniOrange
6.5
0%
Jul 27WordPress WordPress Social Login and Register plugin <= 7.8.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-59545
MD
miniOrange Discord Integration
miniOrange
8.1
0%
Jul 23WordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerability
CVE-2026-5343
SS
Saml Sso - Service Provider
Miniorange
7.4
0%
May 28SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031
CVE-2026-42731
MO
miniorange otp verification
miniOrange
9.8
0%
May 27WordPress miniorange otp verification plugin <= 5.4.9 - Privilege Escalation vulnerability
CVE-2021-47979
BA
Backup and Restore
Miniorange
8.8
0%
May 16WordPress Plugin Backup and Restore 1.0.3 Arbitrary File Deletion
CVE-2026-3217
SS
Saml Sso - Service Provider
Miniorange
6.1
0%
Mar 25SAML SSO - Service Provider - Critical - Cross-site scripting - SA-CONTRIB-2026-018
CVE-2025-68974
WS
WordPress Social Login and Register
miniOrange
6.6
0%
Dec 30WordPress WordPress Social Login and Register plugin <= 7.7.0 - Local File Inclusion vulnerability
CVE-2025-54745
MG
miniOrange's Google Authenticator
miniOrange
6.5
0%
Dec 18WordPress miniOrange's Google Authenticator Plugin <= 6.1.1 - Broken Access Control Vulnerability
CVE-2025-53561
PF
Prevent files / folders access
miniOrange
6.5
0%
Aug 20WordPress Prevent files / folders access Plugin <= 2.6.0 - Path Traversal Vulnerability
CVE-2025-54048
CA
Custom API for WP
miniOrange
9.3
0%
Aug 20WordPress Custom API for WP <= 4.2.2 - SQL Injection Vulnerability
CVE-2025-54049
CA
Custom API for WP
miniOrange
9.9
0%
Aug 20WordPress Custom API for WP <= 4.2.2 - Privilege Escalation Vulnerability
CVE-2025-6675
M2
Miniorange 2fa
Miniorange
4.8
0%
Jun 26Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-082
CVE-2025-31019
PP
Password Policy Manager
miniOrange
8.8
1%
Jun 9WordPress Password Policy Manager plugin <= 2.0.4 - Account Takeover vulnerability
CVE-2025-47670
WS
WordPress Social Login and Register
miniOrange
8.1
1%
May 23WordPress Social Login and Register plugin <= 7.6.10 - Local File Inclusion Vulnerability
CVE-2025-47672
MD
miniOrange Discord Integration
miniOrange
8.1
1%
May 23WordPress miniOrange Discord Integration plugin <= 2.2.2 - Local File Inclusion Vulnerability
CVE-2025-47710
M2
Miniorange 2fa
Miniorange
7.4
0%
May 14Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-056
CVE-2025-47709
M2
Miniorange 2fa
Miniorange
6.5
0%
May 14Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-055
CVE-2025-47708
M2
Miniorange 2fa
Miniorange
8.8
0%
May 14Enterprise MFA - TFA for Drupal - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-054
CVE-2025-47707
M2
Miniorange 2fa
Miniorange
7.5
0%
May 14Enterprise MFA - TFA for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2025-053
CVE-2025-47706
M2
Miniorange 2fa
Miniorange
4.8
0%
May 14Enterprise MFA - TFA for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2025-052
CVE-2025-39545
WR
WordPress REST API Authentication
miniOrange
5.4
1%
Apr 16WordPress REST API Authentication plugin <= 3.6.3 - Settings Change Vulnerability
CVE-2024-11087
SL
Social Login
Miniorange
9.8
0%
Mar 8miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon <= 200.3.9 - Authentication Bypass
CVE-2024-13301
OO
Oauth & Openid Connect Single Sign-on
Miniorange
6.1
0%
Jan 9OAuth & OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) - Critical - Cross Site Scripting - SA-CONTRIB-2024-067
CVE-2024-11297
PR
Page Restriction
Miniorange
7.5
1%
Dec 20Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
CVE-2023-41873
SS
SAML SP Single Sign On
miniOrange
4.3
0%
Dec 13WordPress SAML Single Sign On – SSO Login plugin <= 5.0.4 - Broken Access Control vulnerability
CVE-2023-37987
YS
YourMembership Single Sign On
miniOrange
6.5
1%
Dec 13WordPress YourMembership Single Sign On plugin <= 1.1.3 - Broken Access Control vulnerability
CVE-2023-24375
WS
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn)
miniOrange
3.5
0%
Dec 9WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 - Broken Access Control vulnerability
CVE-2023-25455
WS
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn)
miniOrange
5.3
1%
Dec 9WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.6.0 - Arbitrary Content Deletion vulnerability
CVE-2023-47776
MO
miniorange otp verification
miniOrange
4.3
0%
Dec 9WordPress miniorange otp verification plugin <= 4.2.1 - Broken Access Control vulnerability
CVE-2024-9863
OV
Otp Verification
Miniorange
9.8
1%
Oct 17Miniorange OTP Verification with Firebase <= 3.6.0 - Privilege Escalation via Registration due to Administrator Default User Role Value
CVE-2024-9862
OV
Otp Verification With Firebase
Miniorange
9.8
1%
Oct 17Miniorange OTP Verification with Firebase <= 3.6.0 - Unauthenticated Arbitrary User Password Change
CVE-2024-9861
OV
Otp Verification With Firebase
Miniorange
8.1
1%
Oct 17Miniorange OTP Verification with Firebase <= 3.6.0 - Authentication Bypass
CVE-2022-4539
WA
Web Application Firewall
Miniorange
5.3
1%
Aug 31Web Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass
CVE-2024-0681
PR
Page Restriction
Miniorange
5.3
1%
Mar 13The Page Restriction WordPress (WP) – Protect WP Pages/Post plugin for WordPress is vulnerable to information disclosure in all versions up to, and including, 1.3.4
CVE-2024-25902
MS
Malware Scanner
Miniorange
7.2
1%
Feb 28Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in miniorange Malware Scanner.This issue affects Malware Scanner: from n/a…
CVE-2023-6036
WC
Web3 - Crypto Wallet Login & Nft Token Gating
Miniorange
9.8
2%
Feb 12The Web3 WordPress plugin before 3.0.0 is vulnerable to an authentication bypass due to incorrect authentication checking in the login flow in functions 'handle_auth_request' and…
CVE-2023-4757
SE
Staff / Employee Business Directory For Active Directory
Miniorange
5.4
0%
Jan 16The Staff / Employee Business Directory for Active Directory WordPress plugin before 1.2.3 does not sanitize and escape data returned from the LDAP server before rendering it in…
CVE-2022-44589
GA
Google Authenticator
Miniorange
7.5
1%
Dec 29Exposure of Sensitive Information to an Unauthorized Actor vulnerability in miniOrange miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor,…
CVE-2022-4943
GA
Google Authenticator
Miniorange
5.3
1%
Oct 20The miniOrange's Google Authenticator plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when changing plugin settings in versions up to,…
CVE-2023-5003
AD
Active Directory Integration / Ldap Integration
Miniorange
7.5
27%
Oct 16The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an administrator wants to export said logs
CVE-2023-4506
AD
Active Directory Integration / Ldap Integration
Miniorange
6.5
1%
Sep 27The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 4.1.10
CVE-2023-4505
SE
Staff / Employee Business Directory For Active Directory
Miniorange
4.9
1%
Sep 27The Staff / Employee Business Directory for Active Directory plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 1.2.3
CVE-2023-4238
PF
Prevent Files / Folders Access
Miniorange
7.2
2%
Sep 25The Prevent files / folders access WordPress plugin before 2.5.2 does not validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the…