Vulnerabilities in miniOrange
31 resultsCVE-2021-47979HIGHWordPress Plugin Backup and Restore 1.0.3 Arbitrary File DeletionEPSS 0.4%CVE-2025-53561MEDIUMWordPress Prevent files / folders access Plugin <= 2.6.0 - Path Traversal VulnerabilityEPSS 0.4%CVE-2025-54048CRITICALWordPress Custom API for WP <= 4.2.2 - SQL Injection VulnerabilityEPSS 0.4%CVE-2025-54049CRITICALWordPress Custom API for WP <= 4.2.2 - Privilege Escalation VulnerabilityEPSS 0.4%CVE-2023-23710MEDIUMWordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-47776MEDIUMWordPress miniorange otp verification plugin <= 4.2.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-42731CRITICALWordPress miniorange otp verification plugin <= 5.4.9 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2023-37986MEDIUMWordPress YourMembership Single Sign On Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2025-54745MEDIUMWordPress miniOrange's Google Authenticator Plugin <= 6.1.1 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2022-45073MEDIUMWordPress REST API Authentication plugin <= 2.4.0 - Cross-Site Request Forgery (CSRF) vulnerabilityEPSS 0.3%CVE-2023-23706MEDIUMWordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.5.14 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%