Vendor

    Cyberlord92

    46 known vulnerabilities in products by Cyberlord92, 0 of them actively exploited (CISA KEV).

    Key figures

    46

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    13

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cyberlord92
    CriticalCVE-2023-2982

    miniOrange Wordpress Social Login And Register \(discord\, Google\, Twitter\, Linkedin\): Authentication Bypass Using an Alternate Path or Channel

    also in 1 other product

    9.8
    CriticalCVE-2026-15013

    Cyberlord92 SAML Single Sign On: Improper Verification of Cryptographic Signature

    9.8
    CriticalCVE-2026-85984

    Improper Authentication (CVE-2026-85984)

    9.8
    CriticalCVE-2026-15981

    SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter

    9.8
    CriticalCVE-2026-14245

    Missing Authorization (CVE-2026-14245)

    9.8
    CriticalCVE-2024-2172

    Cyberlord92 Malware Scanner: Missing Critical Step in Authentication

    9.8
    CriticalCVE-2026-12761

    Improper Authentication (CVE-2026-12761)

    9.8
    CriticalCVE-2026-2628

    All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypass

    9.8
    CriticalCVE-2023-3249

    Web3 – Crypto wallet Login & NFT token gating <= 2.6.0 - Authentication Bypass

    also in 1 other product

    9.8
    HighCVE-2025-8420

    Emarket-design Video Gallery: Eval Injection

    also in 2 other products

    8.1
    HighCVE-2026-12000

    Cyberlord92 Page and Post Restriction: Missing Authorization

    7.5
    HighCVE-2026-103895

    Improper Authentication (CVE-2026-103895)

    8.1
    CriticalCVE-2025-9485

    Cyberlord92 OAuth Single Sign On: Improper Verification of Cryptographic Signature

    9.8
    CriticalCVE-2024-9862

    Miniorange OTP Verification with Firebase <= 3.6.0 - Unauthenticated Arbitrary User Password Change

    also in 1 other product

    9.8
    CriticalCVE-2024-9863

    Cyberlord92 Miniorange OTP Verification with Firebase: Incorrect Privilege Assignment

    9.8
    HighCVE-2024-10111

    OAuth Single Sign On – SSO (OAuth Client) <= 6.26.3 - Authentication Bypass

    8.1
    HighCVE-2026-75807

    SAML Single Sign On <= 5.4.6 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning

    7.5
    MediumCVE-2026-118194

    Cyberlord92 Page and Post Restriction: Improper Authentication

    6.5
    HighCVE-2024-9861

    Miniorange OTP Verification with Firebase <= 3.6.0 - Authentication Bypass

    also in 1 other product

    8.1
    HighCVE-2023-2484

    Cyberlord92 Active Directory Integration / LDAP Integration: SQL Injection

    also in 1 other product

    7.2
    CriticalCVE-2024-11087

    miniOrange Social Login: Improper Authentication

    also in 1 other product

    8.1
    HighCVE-2025-7665

    Miniorange OTP Verification with Firebase 3.1.0 - 3.6.2 - Unauthenticated Privilege Escalation

    8.1
    HighCVE-2022-4943

    miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change

    also in 1 other product

    7.5
    HighCVE-2024-9887

    Cyberlord92 SAML IDP (Identity Provider): SQL Injection

    7.2
    HighCVE-2023-3447

    Cyberlord92 Active Directory Integration / LDAP Integration: LDAP Injection

    also in 1 other product

    7.6

    All vulnerabilities in search

    News

    Products