Vulnerabilidades en miniOrange
44 resultadosAnálisis Vexday
miniOrange acumula 26 vulnerabilidades catalogadas, das quais 5 são críticas, mas nenhuma está sob ataque ativo no momento. A fraqueza predominante é insuficiência de controle de acesso (CWE-862), padrão típico de plataformas de autenticação. O risco atual é baixo em termos de exploração imediata, embora a base de vulnerabilidades críticas exija atenção contínua no monitoramento de patches.
CVE-2022-34858CRITICALWordPress OAuth 2.0 client for SSO plugin <= 1.11.3 - Authentication Bypass vulnerabilityEPSS 1.8%CVE-2022-34149CRITICALWordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerabilityEPSS 1.3%CVE-2022-34155HIGHWordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken AuthenticationEPSS 1.0%CVE-2023-25455MEDIUMWordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.6.0 - Arbitrary Content Deletion vulnerabilityEPSS 0.8%CVE-2022-44589HIGHWordPress miniOrange's Google Authenticator Plugin <= 5.6.1 is vulnerable to Sensitive Data ExposureEPSS 0.7%CVE-2022-42461MEDIUMWordPress miniOrange's Google Authenticator plugin <= 5.6.1 - Broken Access Control vulnerabilityEPSS 0.7%CVE-2025-47672HIGHWordPress miniOrange Discord Integration plugin <= 2.2.2 - Local File Inclusion VulnerabilityEPSS 0.6%CVE-2025-47670HIGHWordPress Social Login and Register plugin <= 7.6.10 - Local File Inclusion VulnerabilityEPSS 0.6%CVE-2022-4496MEDIUMminiOrange WordPress SAML SSO multiple versions - Open Redirect in SSO loginEPSS 0.6%CVE-2026-62108CRITICALWordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerabilityEPSS 0.6%CVE-2026-28008CRITICALWordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerabilityEPSS 0.6%CVE-2023-37987MEDIUMWordPress YourMembership Single Sign On plugin <= 1.1.3 - Broken Access Control vulnerabilityEPSS 0.6%CVE-2025-31019HIGHWordPress Password Policy Manager plugin <= 2.0.4 - Account Takeover vulnerabilityEPSS 0.6%CVE-2026-28149CRITICALWordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerabilityEPSS 0.6%CVE-2023-23749HIGHExtension - miniorange - LDAP Integration - LDAP Injection (username)EPSS 0.6%CVE-2024-25902HIGHWordPress Malware Scanner Plugin <= 4.7.2 is vulnerable to SQL InjectionEPSS 0.5%CVE-2025-39545MEDIUMWordPress REST API Authentication plugin <= 3.6.3 - Settings Change VulnerabilityEPSS 0.5%CVE-2023-41873MEDIUMWordPress SAML Single Sign On – SSO Login plugin <= 5.0.4 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2026-42731CRITICALWordPress miniorange otp verification plugin <= 5.4.9 - Privilege Escalation vulnerabilityEPSS 0.5%CVE-2026-61967CRITICALWordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerabilityEPSS 0.5%