miniorange

Top products

The 15 most recently published vulnerabilities affecting miniorange.

• CVE-2026-62108WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability9.8Sep 17, 2026
• CVE-2026-89027miniOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication Downgrade6.5Sep 15, 2026
• CVE-2026-81205LDAP / Active Directory Integration - Moderately critical - Information Disclosure - SA-CONTRIB-2026-1155.3Sep 2, 2026
• CVE-2026-82229WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability7.1Aug 31, 2026
• CVE-2026-73351WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability7.1Aug 18, 2026
• CVE-2026-61979WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability8.1Aug 13, 2026
• CVE-2026-61967WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerability9.8Aug 13, 2026
• CVE-2026-28149WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability9.8Aug 13, 2026
• CVE-2026-28148WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability9.8Aug 13, 2026
• CVE-2026-28008WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability9.8Aug 13, 2026
• CVE-2026-65520WordPress WP OAuth Server plugin <= 6.2.0 - SQL Injection vulnerability9.3Aug 6, 2026
• CVE-2026-61957WordPress miniorange otp verification plugin <= 5.5.1 - Cross Site Scripting (XSS) vulnerability7.1Jul 27, 2026
• CVE-2026-65561WordPress WordPress Social Login and Register plugin <= 7.8.0 - Cross Site Scripting (XSS) vulnerability6.5Jul 27, 2026
• CVE-2026-59545WordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerability8.1Jul 23, 2026
• CVE-2026-5343SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-0317.4May 28, 2026