miniorange
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 78 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 24, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0
WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerability
miniOrange 2FA < 6.2.8 - 2FA Bypass via Unlimited Second-Factor Attempts
miniOrange 2FA < 6.2.7 - Subscriber+ Arbitrary-Recipient OTP Send
miniOrange Social Login and Register < 7.8.0 - Unauthenticated Account Takeover
miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP Flow
miniOrange OTP Login, Verification and SMS Notifications <= 5.5.1 - Authentication Bypass to Administrator Account Takeover via 'username_b' Parameter
SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031
SAML SSO - Service Provider - Critical - Cross-site scripting - SA-CONTRIB-2026-018
WordPress miniOrange's Google Authenticator Plugin <= 6.1.1 - Broken Access Control Vulnerability
Monitor miniorange in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.