Log in Start free

Cyberlord92

Products

ProductCVEsExploitedLatest
Miniorange OTP Verification with Firebase4–Sep 19, 2025
OAuth Single Sign On – SSO (OAuth Client)4–Feb 6, 2026
Active Directory Integration / LDAP Integration4–Sep 26, 2023
Page and Post Restriction4–Oct 30, 2026
miniOrange OTP Login, Verification and SMS Notifications3–Oct 16, 2026
miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn)3–Jul 10, 2026
SAML Single Sign On – SSO Login3–Aug 29, 2026
PowerBI Embed Reports2–Oct 18, 2025
Broken Link Checker | Finder2–Jan 2, 2025
Employee Directory – Staff Directory and Listing2–Feb 6, 2026
Integrate Dynamics 365 CRM2–Jan 17, 2026
Web Application Firewall – website security2–Aug 31, 2024
miniOrange 2FA – Two-Factor Authentication for WordPress (SMS, Email & Google Authenticator)1–Oct 20, 2023
Malware Scanner1–Mar 13, 2024
Password Policy Manager | Password Manager1–Oct 25, 2025
Login with YourMembership – YM SSO Login1–Oct 15, 2025
SAML IDP (Identity Provider) – Login with Website Users1–Nov 16, 2024
All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login1–Mar 3, 2026
Staff/Employee Business Directory for Active Directory1–Sep 26, 2023
User Sync1–Sep 17, 2025
WP Login and Register using JWT1–Nov 19, 2025
Web3 – Crypto wallet Login & NFT token gating1–Jun 30, 2023
WordPress Single Sign-On (SSO) - Multisite All-Inclusive1–Jun 12, 2025
WordPress Single Sign-On (SSO) - Multisite Enterprise1–Jun 12, 2025
WordPress Single Sign-On (SSO) - Multisite Premium1–Jun 12, 2025
WordPress Single Sign-On (SSO) - Single Site All-Inclusive1–Jun 12, 2025
WordPress Single Sign-On (SSO) - Single Site Enterprise1–Jun 12, 2025
WordPress Single Sign-On (SSO) - Single Site Premium1–Jun 12, 2025
WordPress Single Sign-On (SSO) - Single Site Standard1–Jun 12, 2025
miniOrange OTP Verification and SMS Notification for WooCommerce1–Jan 10, 2026

Exploited and recent CVEs

  • CVE-2026-118194 Medium 6.5 Page and Post Restriction <= 1.6.1 - Unauthenticated Authentication Bypass via REST API Nonce Bypass via Cookie Re-Authentication 0.3%
  • CVE-2026-103895 High 8.1 miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace State 0.4%
  • CVE-2026-85984 Critical 9.8 miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter 1.0%
  • CVE-2026-75807 High 7.5 SAML Single Sign On <= 5.4.6 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning 0.4%
  • CVE-2026-12000 High 7.5 Page and Post Restriction <= 1.4.1 - Unauthenticated Missing Authorization to Sensitive Information Exposure via REST API 0.7%
  • CVE-2026-15981 Critical 9.8 SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter 1.3%
  • CVE-2026-15013 Critical 9.8 SAML Single Sign On <= 5.4.3 - Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusion 2.4%
  • CVE-2026-12761 Critical 9.8 miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP Flow 0.9%
  • CVE-2026-14245 Critical 9.8 miniOrange OTP Login, Verification and SMS Notifications <= 5.5.1 - Authentication Bypass to Administrator Account Takeover via 'username_b' Parameter 1.1%
  • CVE-2026-2628 Critical 9.8 All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypass 1.0%
  • CVE-2026-1279 Medium 6.4 Employee Directory <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form_title' Shortcode Attribute 0.3%
  • CVE-2025-10753 Medium 5.3 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 - Missing Authorization 0.4%
  • CVE-2026-0725 Medium 4.4 Integrate Dynamics 365 CRM <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Field Mapping Configuration 0.2%
  • CVE-2025-14948 Medium 5.3 miniOrange OTP Verification and SMS Notification for WooCommerce <= 4.3.8 - Missing Authorization to Unauthenticated Notification Settings Modification 0.3%
  • CVE-2025-12822 Medium 4.3 WP Login and Register using JWT <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) API Key Exposure 0.2%
  • CVE-2025-11255 Medium 4.3 Password Policy Manager | Password Manager <= 2.0.5 - Missing Authorization to Authenticated (Subscriber+) Configuration Log Out 0.2%
  • CVE-2025-10750 Medium 5.3 PowerBI Embed Reports <= 1.2.0 - Unauthenticated Sensitive Information Disclosure 0.5%
  • CVE-2025-10648 Medium 5.3 Login with YourMembership - YM SSO Login <= 1.1.7 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'moym_display_test_attributes' 0.3%
  • CVE-2025-9485 Critical 9.8 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token() 0.6%
  • CVE-2025-10746 Medium 6.5 Integrate Dynamics 365 CRM <= 1.0.9 - Missing Authorization 0.3%
  • CVE-2025-10752 Medium 4.3 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Cross-Site Request Forgery 0.2%
  • CVE-2025-7665 High 8.1 Miniorange OTP Verification with Firebase 3.1.0 - 3.6.2 - Unauthenticated Privilege Escalation 0.4%
  • CVE-2025-9891 Medium 4.3 User Sync – Remote User Sync <= 1.0.2 - Cross-Site Request Forgery to Plugin Deactivation 0.2%
  • CVE-2025-8420 High 8.1 Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution 1.1%
  • CVE-2025-6003 Medium 5.3 WordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure 0.3%
  • CVE-2025-6003 Medium 5.3 WordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure 0.3%
  • CVE-2025-6003 Medium 5.3 WordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure 0.3%
  • CVE-2025-6003 Medium 5.3 WordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure 0.3%
  • CVE-2025-6003 Medium 5.3 WordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure 0.3%
  • CVE-2025-6003 Medium 5.3 WordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure 0.3%