Vulnerabilities

TI-2024-09151 CVE-2024-9862 · GHSA-7wrv-9f62-9f8c

Miniorange OTP Verification with Firebase <= 3.6.0 - Unauthenticated Arbitrary User Password Change

MEDIUM 50

The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 3.6.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00603 Published 2024-10-17 No fix listed CWE-639

TI-2024-09150 CVE-2024-9861 · GHSA-m582-gvhc-6wg7

Miniorange OTP Verification with Firebase <= 3.6.0 - Authentication Bypass

LOW 36

The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.6.0.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00627 Published 2024-10-17 No fix listed CWE-288

Vulnerabilities

Filters

Miniorange OTP Verification with Firebase <= 3.6.0 - Unauthenticated Arbitrary User Password Change

Miniorange OTP Verification with Firebase <= 3.6.0 - Authentication Bypass