WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
miniorange-malware-protection
Published
2022-06-06
Title
miniOrange's Malware Scanner < 4.5.2 - Admin+ Stored Cross-Site Scripting
Slug
miniorange-malware-protection
Published
2023-12-29
Title
Malware Scanner < 4.7.2 - IP Spoofing
Slug
miniorange-malware-protection
Published
2024-02-12
Title
Malware Scanner < 4.7.3 - Admin+ SQLi
Slug
miniorange-malware-protection
Published
2024-03-13
Title
Malware Scanner < 4.7.3 and Web Application Firewall < 2.1.2 - Unauthenticated Privilege Escalation
Slug
miniorange-oauth-20-server
Published
2022-06-20
Title
WP OAuth Server ( Login with WordPress ) < 4.0.1 - Authentication Bypass
Slug
miniorange-oauth-oidc-single-sign-on
Published
2023-02-28
Title
OAuth Single Sign On - SSO (OAuth Client) Enterprise < 48.4.9 - IdP Deletion via CSRF
Slug
miniorange-oauth-oidc-single-sign-on
Published
2023-02-28
Title
OAuth Single Sign On - SSO (OAuth Client) Premium < 38.4.9 - IdP Deletion via CSRF
Slug
miniorange-oauth-oidc-single-sign-on
Published
2023-02-28
Title
OAuth Single Sign On - SSO (OAuth Client) Standard < 28.4.9 - IdP Deletion via CSRF
Slug
miniorange-oauth-oidc-single-sign-on
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Slug
miniorange-oauth-oidc-single-sign-on
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Slug
miniorange-oauth-oidc-single-sign-on
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Slug
miniorange-oauth-oidc-single-sign-on
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Slug
miniorange-oauth-oidc-single-sign-on
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Slug
miniorange-oauth-oidc-single-sign-on
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Slug
miniorange-oauth-oidc-single-sign-on
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Slug
miniorange-openid-connect-client
Published
2021-08-30
Title
Multiple Plugins from miniorange - Reflected Cross-Site Scripting via appId
Slug
miniorange-otp-verification
Published
2023-11-14
Title
miniorange otp verification < 4.2.2 - Missing Authorization via dismiss_notice
Slug
miniorange-saml-20-single-sign-on
Published
2019-05-16
Title
SAML SP SSO < 4.8.74 - Multiple Cross-Site Request Forgery (CSRF)
Slug
miniorange-saml-20-single-sign-on
Published
2019-05-27
Title
SAML SP Single Sign On <= 4.8.72 - Cross-Site Scripting (XSS)
Slug
miniorange-saml-20-single-sign-on
Published
2020-01-28
Title
SAML SP Single Sign On < 4.8.84 - Cross-Site Scripting (XSS) via Crafted SAML XML Response
Slug
miniorange-saml-20-single-sign-on
Published
2023-01-06
Title
miniOrange WordPress SAML SSO Standard < 16.0.8 - Open Redirect in SSO login
Slug
miniorange-saml-20-single-sign-on
Published
2023-01-06
Title
miniOrange WordPress SAML SSO Premium < 12.1.0 - Open Redirect in SSO login
Slug
miniorange-saml-20-single-sign-on
Published
2023-01-06
Title
miniOrange WordPress SAML SSO Premium Multisite < 20.0.7 - Open Redirect in SSO login
Slug
miniorange-saml-20-single-sign-on
Published
2023-09-05
Title
SAML SP Single Sign On < 5.0.5 - Missing Authorization to notice dismissal
Slug
miniorange-sms-order-notification-otp-verification
Published
2026-01-09
Title
miniOrange OTP Verification and SMS Notification for WooCommerce < 4.3.9 - Missing Authorization to Unauthenticated Notification Settings Modification