Vulnerabilidades en Miniorange

44 resultados
Análisis Vexday

Miniomrange possui apenas 1 vulnerabilidade registrada na base, publicada recentemente (últimos 90 dias), relacionada a travessia de diretório (CWE-22). Nenhuma exploração ativa foi observada até o momento e não há CVE críticas associadas ao fornecedor, indicando risco baixo no curto prazo.

CVE-2023-47683HIGHWordPress Social Login, Social Sharing by miniOrange plugin <= 7.6.6 - Authenticated Privilege Escalation vulnerabilityEPSS 0.5%CVE-2025-68974MEDIUMWordPress WordPress Social Login and Register plugin <= 7.7.0 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2026-59545HIGHWordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerabilityEPSS 0.5%CVE-2023-24375LOWWordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-1092MEDIUMOAuth Single Sign On - SSO (OAuth Client) - IdP Deletion via CSRFEPSS 0.4%CVE-2025-53561MEDIUMWordPress Prevent files / folders access Plugin <= 2.6.0 - Path Traversal VulnerabilityEPSS 0.4%CVE-2025-54048CRITICALWordPress Custom API for WP <= 4.2.2 - SQL Injection VulnerabilityEPSS 0.4%CVE-2025-54049CRITICALWordPress Custom API for WP <= 4.2.2 - Privilege Escalation VulnerabilityEPSS 0.4%CVE-2023-52176MEDIUMWordPress Malware Scanner plugin <= 4.7.1 - IP Restriction Bypass vulnerabilityEPSS 0.4%CVE-2026-65520CRITICALWordPress WP OAuth Server plugin <= 6.2.0 - SQL Injection vulnerabilityEPSS 0.4%CVE-2021-47979HIGHWordPress Plugin Backup and Restore 1.0.3 Arbitrary File DeletionEPSS 0.4%CVE-2026-89027MEDIUMminiOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication DowngradeEPSS 0.4%CVE-2026-61979HIGHWordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerabilityEPSS 0.4%CVE-2023-23710MEDIUMWordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-37986MEDIUMWordPress YourMembership Single Sign On Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2026-28148CRITICALWordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerabilityEPSS 0.3%CVE-2023-47776MEDIUMWordPress miniorange otp verification plugin <= 4.2.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-54745MEDIUMWordPress miniOrange's Google Authenticator Plugin <= 6.1.1 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2022-45073MEDIUMWordPress REST API Authentication plugin <= 2.4.0 - Cross-Site Request Forgery (CSRF) vulnerabilityEPSS 0.3%CVE-2023-23706MEDIUMWordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.5.14 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%