Vulnerabilidades en miniOrange

52 resultados
CVE-2022-45073MEDIUMWordPress REST API Authentication plugin <= 2.4.0 - Cross-Site Request Forgery (CSRF) vulnerabilityEPSS 0.3%CVE-2026-97274CRITICALWordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerabilityEPSS 0.3%CVE-2026-107433MEDIUMWordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-62126HIGHWordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerabilityEPSS 0.3%CVE-2023-23706MEDIUMWordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.5.14 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2026-114696MEDIUMWordPress Page Restriction WordPress (WP) plugin <= 1.6.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-61957HIGHWordPress miniorange otp verification plugin <= 5.5.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-73351HIGHWordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-82229HIGHWordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-65561MEDIUMWordPress WordPress Social Login and Register plugin <= 7.8.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97267MEDIUMWordPress Prevent files / folders access plugin <= 2.6.7 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-54852MEDIUMWordPress Page Restriction WordPress (WP) plugin <= 1.6.1 - Broken Access Control vulnerabilityEPSS 0.2%