Plugin icon

Miniorange OTP Verification with Firebase

miniorange-firebase-sms-otp-verification
Plugin closed

Vulnerabilities:

4

Last Updated:

May 14, 2025

Active Installs:

200

Published
Title
Fixed in
CVSS
Published
2025-09-19
Title
Miniorange OTP Verification with Firebase 3.1.0 - 3.6.2 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 3.6.3
CVSS
8.1 (high)
Published
2024-10-16
Title
Miniorange OTP Verification with Firebase < 3.6.1 - Authentication Bypass
Fixed in
Fixed in 3.6.1
CVSS
8.1 (high)
Published
2024-10-16
Title
Miniorange OTP Verification with Firebase < 3.6.1 - Unauthenticated Arbitrary User Password Change
Fixed in
Fixed in 3.6.1
CVSS
9.8 (critical)
Published
2024-10-16
Title
Miniorange OTP Verification with Firebase < 3.6.1 - Privilege Escalation via Registration due to Administrator Default User Role Value
Fixed in
Fixed in 3.6.1
CVSS
9.8 (critical)