PT-2026-115422

The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the mo by pass login function. This is due to mo delay otp process short-circuiting the authentication flow before password validati...