Read the docs

miniOrange

Records129All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical28CVSS 9.0–10.0
CVSS high39CVSS 7.0–8.9

Exploited now

miniOrange records in CISA KEV

No miniOrange vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Active Directory Integration / Ldap Integration 6 records HIGH Google Authenticator 6 records MEDIUM Miniorange 2fa 6 records LOW Oauth Single Sign On 4 records HIGH Saml Sp Single Sign On 3 records LOW Wordpress Social Login And Register (discord, Google, Twitter, Linkedin) 3 records HIGH Malware Scanner 2 records LOW Otp Verification With Firebase 2 records MEDIUM

Records

3 records in Saml Sp Single Sign On · all components

TI-2022-04110 CVE-2022-4496 · GHSA-rcxh-cxjx-w475

miniOrange WordPress SAML SSO multiple versions - Open Redirect in SSO login

Priority LOW 28

The SAML SSO Standard WordPress plugin version 16.0.0 before 16.0.8, SAML SSO Premium WordPress plugin version 12.0.0 before 12.1.0 and SAML SSO Premium Multisite WordPress plugin version 20.0.0 before 20.0.7 does not va…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0061 Published 2023-01-30 Fixed in 16.0.8, 12.1.0 +1
Open these records in search →