miniOrange

Records129All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical28CVSS 9.0–10.0

CVSS high39CVSS 7.0–8.9

Exploited now

miniOrange records in CISA KEV

No miniOrange vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Active Directory Integration / Ldap Integration 6 records HIGH Google Authenticator 6 records MEDIUM Miniorange 2fa 6 records LOW Oauth Single Sign On 4 records HIGH Saml Sp Single Sign On 3 records LOW Wordpress Social Login And Register (discord, Google, Twitter, Linkedin) 3 records HIGH Malware Scanner 2 records LOW Otp Verification With Firebase 2 records MEDIUM

Records

2 records in Otp Verification With Firebase · all components

TI-2024-09151 CVE-2024-9862 · GHSA-7wrv-9f62-9f8c

Miniorange OTP Verification with Firebase <= 3.6.0 - Unauthenticated Arbitrary User Password Change

MEDIUM 50

The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 3.6.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00603 Published 2024-10-17 No fix listed CWE-639

TI-2024-09150 CVE-2024-9861 · GHSA-m582-gvhc-6wg7

Miniorange OTP Verification with Firebase <= 3.6.0 - Authentication Bypass

LOW 36

The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.6.0.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00627 Published 2024-10-17 No fix listed CWE-288

Open these records in search →

Critical	28
High	39
Medium	61
Low	1
No CVSS	0