miniorange
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 83 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 24, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability
miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter
miniOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication Downgrade
miniOrange 2FA (Free & Pro) - Unauthenticated Arbitrary Option Deletion via Out-of-Band Email Link Validator
LDAP / Active Directory Integration - Moderately critical - Information Disclosure - SA-CONTRIB-2026-115
Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak OAuth Single Sign-On (SSO) < 1.2.2, Single Sign-On for Educational Institutes < 1.2.2
WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerability
miniOrange 2FA < 6.2.8 - 2FA Bypass via Unlimited Second-Factor Attempts
miniOrange 2FA < 6.2.7 - Subscriber+ Arbitrary-Recipient OTP Send
miniOrange Social Login and Register < 7.8.0 - Unauthenticated Account Takeover
Monitor miniorange in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.