566 matches found
CVE-2026-14300
The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) WordPress plugin, in versions before 7.8.0 , is vulnerable to an unauthenticated account takeover . The root cause is a failure to bind the one-time code used by the optional email-verification (Profile Completion) feat...
CVE-2026-14300
The miniOrange Social Login and Register Discord, Google, Twitter, LinkedIn WordPress plugin before 7.8.0 does not bind the one-time code used by its optional email-verification Profile Completion feature to the account it was issued for, allowing unauthenticated attackers to obtain a valid sessi...
CVE-2026-14300 miniOrange Social Login and Register < 7.8.0 - Unauthenticated Account Takeover
The miniOrange Social Login and Register Discord, Google, Twitter, LinkedIn WordPress plugin before 7.8.0 does not bind the one-time code used by its optional email-verification Profile Completion feature to the account it was issued for, allowing unauthenticated attackers to obtain a valid sessi...
CVE-2026-14300: Improper Authentication
The miniOrange Social Login and Register Discord, Google, Twitter, LinkedIn WordPress plugin before 7.8.0 does not bind the one-time code used by its optional email-verification Profile Completion feature to the account it was issued for, allowing unauthenticated attackers to obtain a valid sessi...
EUVD-2026-49666
Unauthenticated Cross Site Scripting XSS in miniorange otp verification = 5.5.1 versions...
CVE-2026-61957
Unauthenticated Cross Site Scripting XSS in miniorange otp verification = 5.5.1 versions...
CVE-2026-61957
Unauthenticated Cross Site Scripting XSS in miniorange otp verification = 5.5.1 versions...
CVE-2026-61957 WordPress miniorange otp verification plugin <= 5.5.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in miniorange otp verification = 5.5.1 versions...
CVE-2026-61957 WordPress miniorange otp verification plugin <= 5.5.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in miniorange otp verification = 5.5.1 versions...
CVE-2026-61957
CVE-2026-61957 affects the WordPress plugin Miniorange OTP Verification (versions
WordPress miniorange otp verification plugin <= 5.5.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin miniorange otp verification versions = 5.5.1...
Exploit for CVE-2026-15013
CVE-2026-15013 — miniOrange SAML SSO = 5.4.3 Auth Bypass PoC...
PT-2026-65315
Name of the Vulnerable Software and Affected Versions miniorange otp verification versions prior to 5.5.2 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update minioran...
CVE-2026-61957: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in miniorange otp verification = 5.5.1 versions...
Exploit for CVE-2026-15981
CVE-2026-15981 SAML Single Sign On = 5.4.4 - Unauthenticat...
CVE
Security Advisories & CVEs — Lyris Vale Vulnerabilities I've...
CVE-2026-59545
Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions...
EUVD-2026-48198
Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions...
CVE-2026-59545 WordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions...