Miniorange vulnerabilities
52 CVEs and advisories name Miniorange as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-120844WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.3 - Privilege Escalation vulnerability
- CVE-2026-62126WordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerability
- CVE-2026-54852WordPress Page Restriction WordPress (WP) plugin <= 1.6.1 - Broken Access Control vulnerability
- CVE-2026-114696WordPress Page Restriction WordPress (WP) plugin <= 1.6.0 - Broken Access Control vulnerability
- CVE-2026-107433WordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerability
- CVE-2026-106610WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability
- CVE-2026-97274WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability
- CVE-2026-97267WordPress Prevent files / folders access plugin <= 2.6.7 - Broken Access Control vulnerability
- CVE-2026-62108WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability
- CVE-2026-89027miniOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication Downgrade
- CVE-2026-82229WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-73351WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-61979WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability
- CVE-2026-61967WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerability
- CVE-2026-28149WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability
- CVE-2026-28148WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability
- CVE-2026-28008WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability
- CVE-2026-65520WordPress WP OAuth Server plugin <= 6.2.0 - SQL Injection vulnerability
- CVE-2026-61957WordPress miniorange otp verification plugin <= 5.5.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-65561WordPress WordPress Social Login and Register plugin <= 7.8.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-59545WordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerability
- CVE-2026-42731WordPress miniorange otp verification plugin <= 5.4.9 - Privilege Escalation vulnerability
- CVE-2021-47979WordPress Plugin Backup and Restore 1.0.3 Arbitrary File Deletion
- CVE-2025-68974WordPress WordPress Social Login and Register plugin <= 7.7.0 - Local File Inclusion vulnerability
- CVE-2025-54745WordPress miniOrange's Google Authenticator Plugin <= 6.1.1 - Broken Access Control Vulnerability
- CVE-2025-53561WordPress Prevent files / folders access Plugin <= 2.6.0 - Path Traversal Vulnerability
- CVE-2025-54048WordPress Custom API for WP <= 4.2.2 - SQL Injection Vulnerability
- CVE-2025-54049WordPress Custom API for WP <= 4.2.2 - Privilege Escalation Vulnerability
- CVE-2025-31019WordPress Password Policy Manager plugin <= 2.0.4 - Account Takeover vulnerability
- CVE-2025-47670WordPress Social Login and Register plugin <= 7.6.10 - Local File Inclusion Vulnerability