Miniorange
Miniorange OTP Verification With Firebase: vulnerabilidades y CVE
Miniorange OTP Verification With Firebase tiene 4 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE4
Últimos 12 meses0
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-7665 | Alta (8.1) | 0.37% | — | 19 sept 2025 | The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'handle_mofirebase_form_options' function in versions 3.1.0 to 3.6.2.… |
| CVE-2024-9863 | Crítica (9.8) | 0.60% | — | 17 oct 2024 | The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 3.6.0 due to the insecure 'administrator' default value for the… |
| CVE-2024-9862 | Crítica (9.8) | 0.60% | — | 17 oct 2024 | The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 3.6.0. This is due to the plugin providing user-controlled access to… |
| CVE-2024-9861 | Alta (8.1) | 0.63% | — | 17 oct 2024 | The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.6.0. This is due to missing validation on the token being supplied during the… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Miniorange
Miniorange 2FA · 12Oauth Single Sign ON · 7Google Authenticator · 7Active Directory Integration / Ldap Integration · 6Malware Scanner · 5Saml SP Single Sign ON · 5Wordpress Social Login AND Register · 4Wordpress Social Login AND Register (discord, Google, Twitter, Linkedin) · 3Discord Integration · 3Page Restriction · 2Custom API FOR WP · 2OTP Verification · 2