Read the docs

miniOrange

Records129All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical28CVSS 9.0–10.0
CVSS high39CVSS 7.0–8.9

Exploited now

miniOrange records in CISA KEV

No miniOrange vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Active Directory Integration / Ldap Integration 6 records HIGH Google Authenticator 6 records MEDIUM Miniorange 2fa 6 records LOW Oauth Single Sign On 4 records HIGH Saml Sp Single Sign On 3 records LOW Wordpress Social Login And Register (discord, Google, Twitter, Linkedin) 3 records HIGH Malware Scanner 2 records LOW Otp Verification With Firebase 2 records MEDIUM

Records

2 records in Malware Scanner · all components

TI-2024-17002 CVE-2024-25902 · GHSA-4w5q-x8gv-qmwx

WordPress Malware Scanner Plugin <= 4.7.2 is vulnerable to SQL Injection

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in miniorange Malware Scanner.This issue affects Malware Scanner: from n/a through 4.7.2.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00541 Published 2024-02-28 No fix listed CWE-89
TI-2022-01850 CVE-2022-1995 · GHSA-6c8q-8wcr-hfm7

miniOrange's Malware Scanner < 4.5.2 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Malware Scanner WordPress plugin before 4.5.2 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scrip…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00585 Published 2022-06-27 Fixed in 4.5.2 CWE-79
Open these records in search →