WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
miniorange-saml-20-single-sign-on
Published
2026-08-17
Title
SAML Single Sign On 4.8.85 - 5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite
Slug
miniorange-saml-20-single-sign-on
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Slug
miniorange-saml-20-single-sign-on
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Slug
miniorange-saml-20-single-sign-on
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Slug
miniorange-saml-20-single-sign-on
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Slug
miniorange-saml-20-single-sign-on
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Slug
miniorange-saml-20-single-sign-on
Published
2026-08-13
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Privilege Escalation
Slug
miniorange-saml-20-single-sign-on
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Slug
miniorange-saml-20-single-sign-on
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Slug
miniorange-saml-20-single-sign-on
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Slug
miniorange-saml-20-single-sign-on
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Slug
miniorange-saml-20-single-sign-on
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Slug
miniorange-saml-20-single-sign-on
Published
2026-07-23
Title
SAML Single Sign On (Multiple Versions) - Unauthenticated Authentication Bypass via SAMLResponse Parameter
Slug
miniorange-saml-20-single-sign-on
Published
2026-08-29
Title
SAML Single Sign On < 5.4.7 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning
Slug
miniorange-saml-20-single-sign-on
Published
2026-09-18
Title
SAML Single Sign On < 6.0.0 - Unauthenticated Privilege Escalation via Account Matching
Slug
miniorange-sms-order-notification-otp-verification
Published
2026-01-09
Title
miniOrange OTP Verification and SMS Notification for WooCommerce < 4.3.9 - Missing Authorization to Unauthenticated Notification Settings Modification
Slug
miniorange-wp-as-saml-idp
Published
2022-06-06
Title
Login using WordPress Users < 1.13.4 - Admin+ Stored Cross-Site Scripting
Slug
miniorange-wp-as-saml-idp
Published
2024-11-15
Title
Login using WordPress Users ( WP as SAML IDP ) < 1.15.7 - Authenticated (Administrator+) SQL Injection
Slug
mins-to-read
Published
2024-11-28
Title
Mins To Read <= 1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
minterpress
Published
2024-12-11
Title
Minterpress <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
minterpress
Published
2025-01-16
Title
Minterpress <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
mintpay
Published
2026-10-23
Title
Mintpay <= 2.2.3 - Unauthenticated Order Payment Completion and Cancellation via Callback Forgery
Slug
mipl-wc-checkout-fields
Published
2026-09-10
Title
MIPL Grouped Checkout Fields for WooCommerce < 1.2.3 - Unauthenticated Arbitrary File Upload
Slug
mipl-wc-multisite-sync
Published
2025-01-06
Title
MIPL WC Multisite Sync < 1.1.6 - Unauthenticated Arbitrary File Download
Slug
mipl-wc-multisite-sync
Published
2026-03-01
Title
MIPL WC Multisite Sync <= 1.4.4 - Missing Authorization