Plugin icon

miniOrange OTP Login, Verification and SMS Notifications

miniorange-otp-verification

Vulnerabilities:

8

Last Updated:

October 12, 2026

Active Installs:

5000

Published
Title
Fixed in
CVSS
Published
2026-10-15
Title
miniOrange OTP Login, Verification and SMS Notifications < 5.6.0 - Unauthenticated Authentication Bypass via Delay OTP Grace State
Fixed in
Fixed in 5.6.0
CVSS
8.1 (high)
Published
2026-10-08
Title
miniOrange OTP Login, Verification and SMS Notifications < 5.5.8 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 5.5.8
CVSS
7.3 (high)
Published
2026-09-26
Title
miniOrange OTP Login, Verification and SMS Notifications < 5.5.6 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter
Fixed in
Fixed in 5.5.6
CVSS
9.8 (critical)
Published
2026-08-11
Title
miniOrange OTP Login, Verification and SMS Notifications < 5.5.2 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 5.5.2
CVSS
9.8 (critical)
Published
2026-07-27
Title
miniorange otp verification < 5.5.2 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 5.5.2
CVSS
7.2 (high)
Published
2026-07-08
Title
miniOrange OTP Login, Verification and SMS Notifications < 5.5.2 - Authentication Bypass to Administrator Account Takeover via 'username_b' Parameter
Fixed in
Fixed in 5.5.2
CVSS
7.2 (high)
Published
2026-05-24
Title
miniOrange OTP Login, Verification and SMS Notifications < 5.5.0 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 5.5.0
CVSS
9.8 (critical)
Published
2023-11-14
Title
miniorange otp verification < 4.2.2 - Missing Authorization via dismiss_notice
Fixed in
Fixed in 4.2.2
CVSS
4.3 (medium)