CVE-2026-103895

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the mobypasslogin function. This is due to modelayotpprocess short-circuiting the authentication flow before password validation or...

EUVD-2026-102638

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the mobypasslogin function. This is due to modelayotpprocess short-circuiting the authentication flow before password validation or...

CVE-2026-103895 miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace State

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the mobypasslogin function. This is due to modelayotpprocess short-circuiting the authentication flow before password validation or...

CVE-2026-103895 miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace State

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the mobypasslogin function. This is due to modelayotpprocess short-circuiting the authentication flow before password validation or...

CVE-2026-103895

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress (versions up to and including 5.5.8 ) is vulnerable to an Authentication Bypass . The root cause lies in the mo_delay_otp_process() function, which short-circuits the authentication flow before password validation o...

CVE-2026-103895: Improper Authentication

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the mobypasslogin function. This is due to modelayotpprocess short-circuiting the authentication flow before password validation or...

PT-2026-115422

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the mo by pass login function. This is due to mo delay otp process short-circuiting the authentication flow before password validati...

WordPress miniOrange OTP Login, Verification and SMS Notifications plugin <= 5.5.8 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by Azgnt in WordPress Plugin miniorange otp verification versions = 5.5.8...

WordPress MiniOrange OTP Login, Verification, and SMS Notifications: Authorization Vulnerability

WordPress miniOrange OTP Login, Verification, and SMS Notifications: Versions prior to 5.5.8 have an authorization issue vulnerability. This vulnerability stems from the modelayotpprocess function, which short-circuits the authentication process before password verification or administrator inten...

VulnCheck KEV: CVE-2026-103895

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the mobypasslogin function. This is due to modelayotpprocess short-circuiting the authentication flow before password validation or...

WordPress miniOrange OTP Login, Verification, and SMS Notifications: Permission Issues and Access Control Vulnerabilities

WordPress miniOrange OTP Login, Verification, and SMS Notifications: Versions prior to 5.5.7 have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper permission allocation, which may lead to unauthorized privilege escalation...

WordPress miniOrange OTP Login, Verification and SMS Notifications plugin <= 5.5.5 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by Supakiad S. m3ez in WordPress Plugin miniorange otp verification versions = 5.5.5...

Exploit for CVE-2026-85984

CVE-2026-85984 — miniOrange OTP Login Auth Bypass Python 3...

CVE-2026-85984

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass via the mowploginintent parameter in all versions up to, and including, 5.5.5. This is due to a missing password-intent guard in the skippassfallback-enabled configuration bran...

CVE-2026-85984 miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass via the mowploginintent parameter in all versions up to, and including, 5.5.5. This is due to a missing password-intent guard in the skippassfallback-enabled configuration bran...

EUVD-2026-87786

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass via the mowploginintent parameter in all versions up to, and including, 5.5.5. This is due to a missing password-intent guard in the skippassfallback-enabled configuration bran...

CVE-2026-85984 miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass via the mowploginintent parameter in all versions up to, and including, 5.5.5. This is due to a missing password-intent guard in the skippassfallback-enabled configuration bran...

CVE-2026-85984

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress (versions up to and including 5.5.5 ) is vulnerable to an Authentication Bypass . The root cause is a missing password-intent guard in the mo_by_pass_login() function when the skip_pass_fallback configuration is ena...

CVE-2026-85984: Improper Authentication

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass via the mowploginintent parameter in all versions up to, and including, 5.5.5. This is due to a missing password-intent guard in the skippassfallback-enabled configuration bran...

CVE-2026-14245: Missing Authorization

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 5.5.1. This is due to the umresetpasswordprocesshook function performing no server-side...