75 matches found
CVE-2026-103895
The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the mobypasslogin function. This is due to modelayotpprocess short-circuiting the authentication flow before password validation or...
EUVD-2026-102638
The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the mobypasslogin function. This is due to modelayotpprocess short-circuiting the authentication flow before password validation or...
CVE-2026-103895
The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress (versions up to and including 5.5.8 ) is vulnerable to an Authentication Bypass . The root cause lies in the mo_delay_otp_process() function, which short-circuits the authentication flow before password validation o...
CVE-2026-103895 miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace State
The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the mobypasslogin function. This is due to modelayotpprocess short-circuiting the authentication flow before password validation or...
CVE-2026-103895 miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace State
The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the mobypasslogin function. This is due to modelayotpprocess short-circuiting the authentication flow before password validation or...
CVE-2026-103895: Improper Authentication
The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the mobypasslogin function. This is due to modelayotpprocess short-circuiting the authentication flow before password validation or...
PT-2026-115422
The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the mo by pass login function. This is due to mo delay otp process short-circuiting the authentication flow before password validati...
WordPress miniOrange OTP Login, Verification and SMS Notifications plugin <= 5.5.8 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by Azgnt in WordPress Plugin miniorange otp verification versions = 5.5.8...
WordPress MiniOrange OTP Login, Verification, and SMS Notifications: Authorization Vulnerability
WordPress miniOrange OTP Login, Verification, and SMS Notifications: Versions prior to 5.5.8 have an authorization issue vulnerability. This vulnerability stems from the modelayotpprocess function, which short-circuits the authentication process before password verification or administrator inten...
VulnCheck KEV: CVE-2026-103895
The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the mobypasslogin function. This is due to modelayotpprocess short-circuiting the authentication flow before password validation or...
CVE-2026-106610
Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7...
CVE-2026-106610 WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7...
CVE-2026-106610 WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7...
EUVD-2026-96404
Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7...
CVE-2026-106610
The miniOrange OTP Verification WordPress plugin (versions
CVE-2026-106610: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7...
WordPress miniOrange OTP Login, Verification, and SMS Notifications: Permission Issues and Access Control Vulnerabilities
WordPress miniOrange OTP Login, Verification, and SMS Notifications: Versions prior to 5.5.7 have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper permission allocation, which may lead to unauthorized privilege escalation...
WordPress miniOrange OTP Verification 5.5.7 Account Takeover
WordPress miniOrange OTP Verification plugin versions through 5.5.7 contain an unauthenticated account takeover vulnerability that permits OTP rerouting to an attacker-controlled phone number. A proof of concept is included. https://packetstorm.news/download/235041...
WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by KevineCharles in WordPress Plugin miniorange otp verification versions = 5.5.7...
