Vendor

    miniOrange

    95 known vulnerabilities in products by miniOrange, 0 of them actively exploited (CISA KEV).

    Key figures

    95

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    18

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in miniOrange
    CriticalCVE-2023-2982

    miniOrange Wordpress Social Login And Register \(discord\, Google\, Twitter\, Linkedin\): Authentication Bypass Using an Alternate Path or Channel

    also in 1 other product

    		9.8
    HighCVE-2023-5003

    Active Directory Integration < 4.1.10 - Unauthenticated Log Disclosure

    		7.5
    CriticalCVE-2023-6036

    Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass

    		9.8
    CriticalCVE-2022-34858

    WordPress OAuth 2.0 client for SSO plugin <= 1.11.3 - Authentication Bypass vulnerability

    		9.8
    CriticalCVE-2026-62108

    WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability

    		9.8
    CriticalCVE-2026-28008

    miniOrange OAuth Single Sign On: Authentication Bypass by Spoofing

    		9.8
    CriticalCVE-2022-34149

    WordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerability

    		9.8
    CriticalCVE-2026-28149

    WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2026-106610

    WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability

    		9.8
    CriticalCVE-2023-3249

    Web3 – Crypto wallet Login & NFT token gating <= 2.6.0 - Authentication Bypass

    also in 1 other product

    		9.8
    CriticalCVE-2026-61967

    WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerability

    		9.8
    HighCVE-2023-4238

    Prevent files / folders access < 2.5.2 - Admin+ Arbitrary File Upload

    		7.2
    CriticalCVE-2026-97274

    miniOrange OAuth Single Sign On: Authentication Bypass by Spoofing

    		9.8
    CriticalCVE-2026-28148

    WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability

    		9.8
    CriticalCVE-2026-65520

    WordPress WP OAuth Server plugin <= 6.2.0 - SQL Injection vulnerability

    		9.3
    HighCVE-2022-34155

    miniOrange OAuth Single Sign On: Improper Authentication

    		8.8
    CriticalCVE-2024-9862

    Miniorange OTP Verification with Firebase <= 3.6.0 - Unauthenticated Arbitrary User Password Change

    also in 1 other product

    		9.8
    HighCVE-2026-61979

    WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability

    		8.1
    HighCVE-2026-59545

    WordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerability

    		8.1
    CriticalCVE-2026-42731

    WordPress miniorange otp verification plugin <= 5.4.9 - Privilege Escalation vulnerability

    		9.8
    MediumCVE-2020-6850

    miniOrange SAML SP Single Sign On: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2025-31019

    WordPress Password Policy Manager plugin <= 2.0.4 - Account Takeover vulnerability

    		8.8
    HighCVE-2025-47670

    WordPress Social Login and Register plugin <= 7.6.10 - Local File Inclusion Vulnerability

    		8.1
    HighCVE-2025-47672

    WordPress miniOrange Discord Integration plugin <= 2.2.2 - Local File Inclusion Vulnerability

    		8.1
    HighCVE-2021-47979

    WordPress Plugin Backup and Restore 1.0.3 Arbitrary File Deletion

    		8.8

    All vulnerabilities in search

    News

    Products

    Products by miniOrange
    Wordpress Social Login And Register (discord, Google, Twitter, Linkedin)80
    Active Directory Integration \/ LDAP Integration60
    Drupal Enterprise MFA - TFA for Drupal60
    miniOrange's Google Authenticator60
    Miniorange Otp Verification50
    miniOrange SAML SP Single Sign On50
    Wordpress Social Login And Register50
    Malware Scanner40
    OAuth Single Sign On40
    Headless Single Sign On30
    Oauth Single Sign On – Sso (oauth Client)30
    Prevent Files / Folders Access30
    Wp Oauth Server30