Miniorange vulnerabilities
52 published CVEs name Miniorange among the affected products.
- 52Published CVEs52 of them scored
- 25Last 12 monthspublished in the last year
- 14Critical15 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-120844
WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.3 - Privilege Escalation vulnerability
miniOrange · OAuth Single Sign On – SSO (OAuth Client)
Critical9.8 - CVE-2026-62126
WordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerability
miniOrange · SAML SP Single Sign On
High7.5 - CVE-2026-54852
WordPress Page Restriction WordPress (WP) plugin <= 1.6.1 - Broken Access Control vulnerability
miniOrange · Page Restriction WordPress (WP)
Medium5.3 - CVE-2026-114696
WordPress Page Restriction WordPress (WP) plugin <= 1.6.0 - Broken Access Control vulnerability
miniOrange · Page Restriction WordPress (WP)
Medium5.3 - CVE-2026-107433
WordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerability
miniOrange · WP OAuth Server
Medium6.5 - CVE-2026-106610
WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability
miniOrange · miniorange otp verification
Critical9.8 - CVE-2026-97274
WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability
miniOrange · OAuth Single Sign On – SSO (OAuth Client)
Critical9.8 - CVE-2026-97267
WordPress Prevent files / folders access plugin <= 2.6.7 - Broken Access Control vulnerability
miniOrange · Prevent files / folders access
Medium4.3 - CVE-2026-62108
WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability
miniOrange · Headless Single Sign On
Critical9.8 - CVE-2026-89027
miniOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication Downgrade
miniOrange · JWT Authentication for WP REST APIs
Medium6.9