Vendor
Cyberlord92
46 known vulnerabilities in products by Cyberlord92, 0 of them actively exploited (CISA KEV).
Key figures
46
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
13
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-2982 | miniOrange Wordpress Social Login And Register \(discord\, Google\, Twitter\, Linkedin\): Authentication Bypass Using an Alternate Path or Channel | 9.8 | |
| Critical | CVE-2026-15013 | Cyberlord92 SAML Single Sign On: Improper Verification of Cryptographic Signature | 9.8 | |
| Critical | CVE-2026-85984 | Improper Authentication (CVE-2026-85984) | 9.8 | |
| Critical | CVE-2026-15981 | SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter | 9.8 | |
| Critical | CVE-2026-14245 | Missing Authorization (CVE-2026-14245) | 9.8 | |
| Critical | CVE-2024-2172 | Cyberlord92 Malware Scanner: Missing Critical Step in Authentication | 9.8 | |
| Critical | CVE-2026-12761 | Improper Authentication (CVE-2026-12761) | 9.8 | |
| Critical | CVE-2026-2628 | All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypass | 9.8 | |
| Critical | CVE-2023-3249 | Web3 – Crypto wallet Login & NFT token gating <= 2.6.0 - Authentication Bypass | 9.8 | |
| High | CVE-2025-8420 | Emarket-design Video Gallery: Eval Injection | 8.1 | |
| High | CVE-2026-12000 | Cyberlord92 Page and Post Restriction: Missing Authorization | 7.5 | |
| High | CVE-2026-103895 | Improper Authentication (CVE-2026-103895) | 8.1 | |
| Critical | CVE-2025-9485 | Cyberlord92 OAuth Single Sign On: Improper Verification of Cryptographic Signature | 9.8 | |
| Critical | CVE-2024-9862 | Miniorange OTP Verification with Firebase <= 3.6.0 - Unauthenticated Arbitrary User Password Change | 9.8 | |
| Critical | CVE-2024-9863 | Cyberlord92 Miniorange OTP Verification with Firebase: Incorrect Privilege Assignment | 9.8 | |
| High | CVE-2024-10111 | OAuth Single Sign On – SSO (OAuth Client) <= 6.26.3 - Authentication Bypass | 8.1 | |
| High | CVE-2026-75807 | SAML Single Sign On <= 5.4.6 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning | 7.5 | |
| Medium | CVE-2026-118194 | Cyberlord92 Page and Post Restriction: Improper Authentication | 6.5 | |
| High | CVE-2024-9861 | Miniorange OTP Verification with Firebase <= 3.6.0 - Authentication Bypass | 8.1 | |
| High | CVE-2023-2484 | Cyberlord92 Active Directory Integration / LDAP Integration: SQL Injection | 7.2 | |
| Critical | CVE-2024-11087 | miniOrange Social Login: Improper Authentication | 8.1 | |
| High | CVE-2025-7665 | Miniorange OTP Verification with Firebase 3.1.0 - 3.6.2 - Unauthenticated Privilege Escalation | 8.1 | |
| High | CVE-2022-4943 | miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change | 7.5 | |
| High | CVE-2024-9887 | Cyberlord92 SAML IDP (Identity Provider): SQL Injection | 7.2 | |
| High | CVE-2023-3447 | Cyberlord92 Active Directory Integration / LDAP Integration: LDAP Injection | 7.6 |