Plugin icon

miniOrange OTP Login, Verification and SMS Notifications

miniorange-otp-verification

Vulnerabilities:

5

Last Updated:

August 4, 2026

Active Installs:

5000

Published
Title
Fixed in
CVSS
Published
2026-08-11
Title
miniOrange OTP Login, Verification and SMS Notifications < 5.5.2 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 5.5.2
CVSS
9.8 (critical)
Published
2026-07-27
Title
miniorange otp verification < 5.5.2 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 5.5.2
CVSS
7.2 (high)
Published
2026-07-08
Title
miniOrange OTP Login, Verification and SMS Notifications < 5.5.2 - Authentication Bypass to Administrator Account Takeover via 'username_b' Parameter
Fixed in
Fixed in 5.5.2
CVSS
7.2 (high)
Published
2026-05-24
Title
miniOrange OTP Login, Verification and SMS Notifications < 5.5.0 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 5.5.0
CVSS
9.8 (critical)
Published
2023-11-14
Title
miniorange otp verification < 4.2.2 - Missing Authorization via dismiss_notice
Fixed in
Fixed in 4.2.2
CVSS
4.3 (medium)