Miniorange
Miniorange Google Authenticator: vulnerabilidades y CVE
Miniorange Google Authenticator tiene 7 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE7
Últimos 12 meses1
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-14204 | Media (6.5) | 0.18% | — | 6 ago 2026 | The Google Authenticator WordPress plugin before 0.56 does not verify a CSRF nonce when saving its two-factor setup, allowing attackers to trick a logged-in user into overwriting their own 2FA secret with an… |
| CVE-2022-44589 | Alta (7.5) | 0.70% | — | 29 dic 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in miniOrange miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor, OTP SMS and Email | Passwordless… |
| CVE-2022-4943 | Media (5.3) | 0.54% | — | 20 oct 2023 | The miniOrange's Google Authenticator plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when changing plugin settings in versions up to, and including, 5.6.5. This makes it… |
| CVE-2022-42461 | Alta (8.8) | 0.69% | — | 18 nov 2022 | Broken Access Control vulnerability in miniOrange's Google Authenticator plugin <= 5.6.1 on WordPress. |
| CVE-2022-1321 | Media (4.8) | 0.59% | — | 27 jun 2022 | The miniOrange's Google Authenticator WordPress plugin before 5.5.6 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading… |
| CVE-2022-0875 | Media (4.3) | 0.43% | — | 27 jun 2022 | The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not sanitise as well as escape them, allowing attackers to make a logged in admin change them and… |
| CVE-2022-0229 | Alta (8.1) | 0.55% | — | 21 mar 2022 | The miniOrange's Google Authenticator WordPress plugin before 5.5 does not have proper authorisation and CSRF checks when handling the reconfigureMethod, and does not validate the parameters passed to it properly. As a… |
Otros productos de Miniorange
Miniorange 2FA · 12Oauth Single Sign ON · 7Active Directory Integration / Ldap Integration · 6Saml SP Single Sign ON · 5Malware Scanner · 5OTP Verification With Firebase · 4Wordpress Social Login AND Register · 4Wordpress Social Login AND Register (discord, Google, Twitter, Linkedin) · 3Discord Integration · 3Page Restriction · 2Custom API FOR WP · 2Password Policy Manager · 2