WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
miniorange-oauth-oidc-single-sign-on
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Slug
miniorange-oauth-oidc-single-sign-on
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Slug
miniorange-oauth-oidc-single-sign-on
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Slug
miniorange-oauth-oidc-single-sign-on
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Slug
miniorange-oauth-oidc-single-sign-on
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Slug
miniorange-oauth-oidc-single-sign-on
Published
2025-06-11
Title
WordPress Single Sign-On (SSO) - Incorrect Authorization to Sensitive Information Exposure
Slug
miniorange-openid-connect-client
Published
2021-08-30
Title
Multiple Plugins from miniorange - Reflected Cross-Site Scripting via appId
Slug
miniorange-otp-verification
Published
2023-11-14
Title
miniorange otp verification < 4.2.2 - Missing Authorization via dismiss_notice
Slug
miniorange-saml-20-single-sign-on
Published
2019-05-16
Title
SAML SP SSO < 4.8.74 - Multiple Cross-Site Request Forgery (CSRF)
Slug
miniorange-saml-20-single-sign-on
Published
2019-05-27
Title
SAML SP Single Sign On <= 4.8.72 - Cross-Site Scripting (XSS)
Slug
miniorange-saml-20-single-sign-on
Published
2020-01-28
Title
SAML SP Single Sign On < 4.8.84 - Cross-Site Scripting (XSS) via Crafted SAML XML Response
Slug
miniorange-saml-20-single-sign-on
Published
2023-01-06
Title
miniOrange WordPress SAML SSO Standard < 16.0.8 - Open Redirect in SSO login
Slug
miniorange-saml-20-single-sign-on
Published
2023-01-06
Title
miniOrange WordPress SAML SSO Premium < 12.1.0 - Open Redirect in SSO login
Slug
miniorange-saml-20-single-sign-on
Published
2023-01-06
Title
miniOrange WordPress SAML SSO Premium Multisite < 20.0.7 - Open Redirect in SSO login
Slug
miniorange-saml-20-single-sign-on
Published
2023-09-05
Title
SAML SP Single Sign On < 5.0.5 - Missing Authorization to notice dismissal
Slug
miniorange-wp-as-saml-idp
Published
2022-06-06
Title
Login using WordPress Users < 1.13.4 - Admin+ Stored Cross-Site Scripting
Slug
miniorange-wp-as-saml-idp
Published
2024-11-15
Title
Login using WordPress Users ( WP as SAML IDP ) < 1.15.7 - Authenticated (Administrator+) SQL Injection
Slug
mins-to-read
Published
2024-11-28
Title
Mins To Read <= 1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
minterpress
Published
2024-12-11
Title
Minterpress <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
minterpress
Published
2025-01-16
Title
Minterpress <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
mipl-wc-multisite-sync
Published
2025-01-06
Title
MIPL WC Multisite Sync < 1.1.6 - Unauthenticated Arbitrary File Download
Slug
miraculouscore
Published
2025-08-21
Title
Miraculous Core < 2.0.8 - Unauthenticated Privilege Escalation
Slug
miraculouscore
Published
2025-09-01
Title
Miraculous Core < 2.0.9 - Unauthenticated Insecure Direct Object Reference
Slug
misiek-paypal
Published
2024-08-22
Title
Misiek Paypal <= 1.1.20090324 - Stored XSS via CSRF
Slug
misiek-photo-album
Published
2024-08-22
Title
Misiek Photo Album <= 1.4.3 - Stored XSS via CSRF