miniorange
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 75 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 24, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →miniOrange 2FA < 6.2.7 - Subscriber+ Arbitrary-Recipient OTP Send
miniOrange Social Login and Register < 7.8.0 - Unauthenticated Account Takeover
miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP Flow
miniOrange OTP Login, Verification and SMS Notifications <= 5.5.1 - Authentication Bypass to Administrator Account Takeover via 'username_b' Parameter
SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031
SAML SSO - Service Provider - Critical - Cross-site scripting - SA-CONTRIB-2026-018
WordPress miniOrange's Google Authenticator Plugin <= 6.1.1 - Broken Access Control Vulnerability
Miniorange OTP Verification with Firebase 3.1.0 - 3.6.2 - Unauthenticated Privilege Escalation
WordPress Prevent files / folders access Plugin <= 2.6.0 - Path Traversal Vulnerability
WordPress Custom API for WP <= 4.2.2 - SQL Injection Vulnerability
Monitor miniorange in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.