miniOrange Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn)5 vulnerabilities
miniorange otp verification4 vulnerabilities
WordPress Social Login and Register3 vulnerabilities
Custom API for WP2 vulnerabilities
Headless Single Sign On2 vulnerabilities
Malware Scanner2 vulnerabilities
miniOrange Discord Integration2 vulnerabilities
OAuth Single Sign On – SSO (OAuth Client)2 vulnerabilities
otp_verification2 vulnerabilities
SAML SP Single Sign On2 vulnerabilities
web_application_firewall2 vulnerabilities
wordpress_social_login_and_register_\(discord\,_google\,_twitter\,_linkedin\)2 vulnerabilities
Backup and Restore1 vulnerability
LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login1 vulnerability
Malware Scanner plugin and Web Application Firewall plugin for WordPress1 vulnerability
malware_scanner1 vulnerability
miniOrange WordPress SAML SSO Premium1 vulnerability
miniOrange WordPress SAML SSO Premium MulsiteSite1 vulnerability
miniOrange WordPress SAML SSO Standard1 vulnerability
miniOrange's Google Authenticator1 vulnerability
miniOrange's Google Authenticator (WordPress plugin)1 vulnerability
miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor, OTP SMS and Email | Passwordless login1 vulnerability
OAuth 2.0 client for SSO (WordPress plugin)1 vulnerability
OAuth Single Sign On Enterprise1 vulnerability
OAuth Single Sign On Free1 vulnerability

miniOrange vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2022-42461MEDIUM	WordPress miniOrange's Google Authenticator plugin <= 5.6.1 - Broken Access Control vulnerability Broken Access Control vulnerability in miniOrange's Google Authenticator plugin <= 5.6.1 on WordPress. CWE-264Nov 18, 2022	CVSS5.4v3.1	EPSS0.636%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX