Miniorange vulnerabilities

CVEs per yearBy the year they were published

1. 20224
2. 20238
3. 20248
4. 20259
5. 202622

Newest CVEs

• CVE-2026-62126

  WordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerability

  miniOrange · SAML SP Single Sign On

  High7.5
• CVE-2026-54852

  WordPress Page Restriction WordPress (WP) plugin <= 1.6.1 - Broken Access Control vulnerability

  miniOrange · Page Restriction WordPress (WP)

  Medium5.3
• CVE-2026-114696

  WordPress Page Restriction WordPress (WP) plugin <= 1.6.0 - Broken Access Control vulnerability

  miniOrange · Page Restriction WordPress (WP)

  Medium5.3
• CVE-2026-107433

  WordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerability

  miniOrange · WP OAuth Server

  Medium6.5
• CVE-2026-106610

  WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability

  miniOrange · miniorange otp verification

  Critical9.8
• CVE-2026-97274

  WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability

  miniOrange · OAuth Single Sign On – SSO (OAuth Client)

  Critical9.8
• CVE-2026-97267

  WordPress Prevent files / folders access plugin <= 2.6.7 - Broken Access Control vulnerability

  miniOrange · Prevent files / folders access

  Medium4.3
• CVE-2026-62108

  WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability

  miniOrange · Headless Single Sign On

  Critical9.8
• CVE-2026-89027

  miniOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication Downgrade

  miniOrange · JWT Authentication for WP REST APIs

  Medium6.9
• CVE-2026-82229

  WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability

  miniOrange · WordPress Social Login and Register

  High7.1