CVE-2026-77770

CVE-2026-77770 miniOrange 2FA CVE POC miniOrange 2FA WordPress plugin miniorange-2-factor-authentication ≤ 6.3.0 — unauthenticated arbitrary WordPress option deletion via the email-verification link userID / Txid / accessToken. For authorized testing only. Do not run this against systems you do n...

CVE-2026-85984

CVE-2026-85984 — miniOrange OTP Login Auth Bypass Python 3 PoC for CVE-2026-85984 — miniOrange OTP Login, Verification and SMS Notifications ≤ 5.5.5. Description PoCbit / GitHub CVE-2026-85984 — Unauthenticated authentication bypass CWE-287 via POST parameter mowploginintent=otp with an empty...

CVE-2026-15013

CVE-2026-15013 — miniOrange SAML SSO = 5.4.3 Auth Bypass PoC Proof-of-concept for CVE-2026-15013 : unauthenticated authentication bypass via SAML Signature Algorithm Confusion HMAC-SHA1 in the miniOrange SAML Single Sign On – SSO Login WordPress plugin versions up to and including 5.4.3. Authoriz...

CVE-2026-77771

CVE-2026-77771 — miniOrange 2FA Free & Pro: 2FA Bypass via Session-Scoped OTP Lockout An authentication bypass in the miniOrange Two-Factor Authentication plugin for WordPress allows an attacker who already holds a victim's valid password to brute-force the second factor without limit, defeating...

CVE-2026-120844

Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On – SSO OAuth Client miniorange-login-with-eve-online-google-facebook allows Privilege Escalation.This issue affects OAuth Single Sign On – SSO OAuth Client: from n/a through 7.1.3...

CVE-2026-120844 WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.3 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On – SSO OAuth Client miniorange-login-with-eve-online-google-facebook allows Privilege Escalation.This issue affects OAuth Single Sign On – SSO OAuth Client: from n/a through 7.1.3...

EUVD-2026-117997

Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On – SSO OAuth Client miniorange-login-with-eve-online-google-facebook allows Privilege Escalation.This issue affects OAuth Single Sign On – SSO OAuth Client: from n/a through 7.1.3...

CVE-2026-120844

The miniOrange OAuth Single Sign On – SSO (OAuth Client) plugin (specifically miniorange-login-with-eve-online-google-facebook ) is affected by an Incorrect Privilege Assignment vulnerability (CWE-266). This flaw allows for Privilege Escalation and impacts versions from n/a through 7.1.3 . Exploi...

CVE-2026-62126

Allocation of Resources Without Limits or Throttling vulnerability in miniOrange SAML SP Single Sign On miniorange-saml-20-single-sign-on allows HTTP DoS.This issue affects SAML SP Single Sign On: from n/a through 6.1.0...

CVE-2026-62126

The miniOrange SAML SP Single Sign On WordPress plugin (versions

CVE-2026-62126 WordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerability

Allocation of Resources Without Limits or Throttling vulnerability in miniOrange SAML SP Single Sign On miniorange-saml-20-single-sign-on allows HTTP DoS.This issue affects SAML SP Single Sign On: from n/a through 6.1.0...

EUVD-2026-116774

Allocation of Resources Without Limits or Throttling vulnerability in miniOrange SAML SP Single Sign On miniorange-saml-20-single-sign-on allows HTTP DoS.This issue affects SAML SP Single Sign On: from n/a through 6.1.0...

CVE-2026-54852

Missing Authorization vulnerability in miniOrange Page Restriction WordPress WP page-and-post-restriction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Restriction WordPress WP: from n/a through 1.6.1...

CVE-2026-54852

The miniOrange Page Restriction WordPress (WP) plugin, specifically versions up to and including 1.6.1 , is vulnerable to a Missing Authorization (Broken Access Control) flaw. The vulnerability arises from incorrectly configured access control security levels , which could allow unauthorized acti...

CVE-2026-54852 WordPress Page Restriction WordPress (WP) plugin <= 1.6.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in miniOrange Page Restriction WordPress WP page-and-post-restriction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Restriction WordPress WP: from n/a through 1.6.1...

EUVD-2026-112887

Missing Authorization vulnerability in miniOrange Page Restriction WordPress WP page-and-post-restriction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Restriction WordPress WP: from n/a through 1.6.1...

PT-2026-132198

Missing Authorization vulnerability in miniOrange Page Restriction WordPress WP page-and-post-restriction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Restriction WordPress WP: from n/a through 1.6.1...

CVE-2026-54852: miniOrange Page Restriction WordPress (WP): Missing Authorization vulnerability in miniOrange Page Restriction WordPress (WP) page-and-post-restriction allows…

Missing Authorization vulnerability in miniOrange Page Restriction WordPress WP page-and-post-restriction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Restriction WordPress WP: from n/a through 1.6.1...

MiniOrange Page Restriction WordPress authorization issue vulnerability

MiniOrange Page Restriction WordPress versions 1.6.1 and earlier contain an authorization issue vulnerability. This vulnerability stems from missing authorization checks and may allow attackers to exploit improperly configured access control levels...

CVE-2026-114696

Missing Authorization vulnerability in miniOrange Page Restriction WordPress WP page-and-post-restriction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Restriction WordPress WP: from n/a through 1.6.0...