Cyberlord92 vulnerabilities
46 CVEs and advisories name Cyberlord92 as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-118194Page and Post Restriction <= 1.6.1 - Unauthenticated Authentication Bypass via REST API Nonce Bypass via Cookie Re-Authentication
- CVE-2026-103895miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace State
- CVE-2026-85984miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter
- CVE-2026-75807SAML Single Sign On <= 5.4.6 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning
- CVE-2026-12000Page and Post Restriction <= 1.4.1 - Unauthenticated Missing Authorization to Sensitive Information Exposure via REST API
- CVE-2026-15981SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter
- CVE-2026-15013SAML Single Sign On <= 5.4.3 - Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusion
- CVE-2026-12761miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP Flow
- CVE-2026-14245miniOrange OTP Login, Verification and SMS Notifications <= 5.5.1 - Authentication Bypass to Administrator Account Takeover via 'username_b' Parameter
- CVE-2026-2628All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypass
- CVE-2026-1279Employee Directory <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form_title' Shortcode Attribute
- CVE-2025-10753OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 - Missing Authorization
- CVE-2026-0725Integrate Dynamics 365 CRM <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Field Mapping Configuration
- CVE-2025-14948miniOrange OTP Verification and SMS Notification for WooCommerce <= 4.3.8 - Missing Authorization to Unauthenticated Notification Settings Modification
- CVE-2025-12822WP Login and Register using JWT <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) API Key Exposure
- CVE-2025-11255Password Policy Manager | Password Manager <= 2.0.5 - Missing Authorization to Authenticated (Subscriber+) Configuration Log Out
- CVE-2025-10750PowerBI Embed Reports <= 1.2.0 - Unauthenticated Sensitive Information Disclosure
- CVE-2025-10648Login with YourMembership - YM SSO Login <= 1.1.7 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'moym_display_test_attributes'
- CVE-2025-9485OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()
- CVE-2025-10746Integrate Dynamics 365 CRM <= 1.0.9 - Missing Authorization
- CVE-2025-10752OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Cross-Site Request Forgery
- CVE-2025-7665Miniorange OTP Verification with Firebase 3.1.0 - 3.6.2 - Unauthenticated Privilege Escalation
- CVE-2025-9891User Sync – Remote User Sync <= 1.0.2 - Cross-Site Request Forgery to Plugin Deactivation
- CVE-2025-8420Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution
- CVE-2025-6003WordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure
- CVE-2024-11087miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon <= 200.3.9 - Authentication Bypass
- CVE-2023-46082WordPress Broken Link Checker | Finder plugin <= 2.4.2 - Broken Access Control vulnerability
- CVE-2024-11297Page Restriction WordPress (WP) – Protect WP Pages/Post <= 1.3.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
- CVE-2024-12121Broken Link Checker | Finder <= 2.5.0 - Authenticated (Author+) Blind Server-Side Request Forgery
- CVE-2024-10111OAuth Single Sign On – SSO (OAuth Client) <= 6.26.3 - Authentication Bypass