Miniorange vulnerabilities
52 CVEs and advisories name Miniorange as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-47672WordPress miniOrange Discord Integration plugin <= 2.2.2 - Local File Inclusion Vulnerability
- CVE-2025-39545WordPress REST API Authentication plugin <= 3.6.3 - Settings Change Vulnerability
- CVE-2023-41873WordPress SAML Single Sign On – SSO Login plugin <= 5.0.4 - Broken Access Control vulnerability
- CVE-2023-37987WordPress YourMembership Single Sign On plugin <= 1.1.3 - Broken Access Control vulnerability
- CVE-2023-24375WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 - Broken Access Control vulnerability
- CVE-2023-25455WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.6.0 - Arbitrary Content Deletion vulnerability
- CVE-2023-47776WordPress miniorange otp verification plugin <= 4.2.1 - Broken Access Control vulnerability
- CVE-2023-52176WordPress Malware Scanner plugin <= 4.7.1 - IP Restriction Bypass vulnerability
- CVE-2023-47683WordPress Social Login, Social Sharing by miniOrange plugin <= 7.6.6 - Authenticated Privilege Escalation vulnerability
- CVE-2024-25902WordPress Malware Scanner Plugin <= 4.7.2 is vulnerable to SQL Injection
- CVE-2022-44589WordPress miniOrange's Google Authenticator Plugin <= 5.6.1 is vulnerable to Sensitive Data Exposure
- CVE-2023-37986WordPress YourMembership Single Sign On Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-34155WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication
- CVE-2023-23706WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.5.14 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23710WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-1092OAuth Single Sign On - SSO (OAuth Client) - IdP Deletion via CSRF
- CVE-2022-4496miniOrange WordPress SAML SSO multiple versions - Open Redirect in SSO login
- CVE-2023-23749Extension - miniorange - LDAP Integration - LDAP Injection (username)
- CVE-2022-45073WordPress REST API Authentication plugin <= 2.4.0 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-42461WordPress miniOrange's Google Authenticator plugin <= 5.6.1 - Broken Access Control vulnerability
- CVE-2022-34149WordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerability
- CVE-2022-34858WordPress OAuth 2.0 client for SSO plugin <= 1.11.3 - Authentication Bypass vulnerability