Log in Start free

MiniOrange

Products

ProductCVEsExploitedLatest
WordPress Social Login and Register5–Aug 31, 2026
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn)5–Dec 9, 2024
miniorange otp verification5–Oct 10, 2026
SAML SP Single Sign On3–Nov 4, 2026
OAuth Single Sign On – SSO (OAuth Client)3–Sep 30, 2026
Headless Single Sign On3–Sep 17, 2026
Custom API for WP2–Aug 20, 2025
Prevent files / folders access2–Sep 30, 2026
Malware Scanner2–Jun 4, 2024
WP OAuth Server2–Oct 14, 2026
miniOrange Discord Integration2–Jul 23, 2026
Page Restriction WordPress (WP)2–Oct 29, 2026
OAuth Single Sign On Premium1–Mar 27, 2023
OAuth Single Sign On Standard1–Mar 27, 2023
Password Policy Manager1–Jun 9, 2025
WordPress REST API Authentication1–Apr 16, 2025
WordPress REST API Authentication (WordPress plugin)1–Nov 18, 2022
WP OAuth Server (WordPress plugin)1–Aug 22, 2022
YourMembership Single Sign On1–Dec 13, 2024
Backup and Restore1–May 16, 2026
YourMembership Single Sign On – YM SSO Login1–Sep 1, 2023
JWT Authentication for WP REST APIs1–Sep 15, 2026
LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login1–Jan 17, 2023
miniOrange WordPress SAML SSO Premium1–Jan 30, 2023
miniOrange WordPress SAML SSO Premium MulsiteSite1–Jan 30, 2023
miniOrange WordPress SAML SSO Standard1–Jan 30, 2023
miniOrange's Google Authenticator1–Dec 18, 2025
miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor, OTP SMS and Email | Passwordless login1–Dec 29, 2023
miniOrange's Google Authenticator (WordPress plugin)1–Nov 18, 2022
OAuth 2.0 client for SSO (WordPress plugin)1–Aug 22, 2022
OAuth Single Sign On Enterprise1–Mar 27, 2023
OAuth Single Sign On Free1–Mar 27, 2023

Exploited and recent CVEs

  • CVE-2026-62126 High 7.5 WordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerability 0.3%
  • CVE-2026-54852 Medium 5.3 WordPress Page Restriction WordPress (WP) plugin <= 1.6.1 - Broken Access Control vulnerability 0.2%
  • CVE-2026-114696 Medium 5.3 WordPress Page Restriction WordPress (WP) plugin <= 1.6.0 - Broken Access Control vulnerability 0.3%
  • CVE-2026-107433 Medium 6.5 WordPress WP OAuth Server plugin <= 6.4.0 - Broken Access Control vulnerability 0.3%
  • CVE-2026-106610 Critical 9.8 WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability 0.4%
  • CVE-2026-97274 Critical 9.8 WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability 0.3%
  • CVE-2026-97267 Medium 4.3 WordPress Prevent files / folders access plugin <= 2.6.7 - Broken Access Control vulnerability 0.2%
  • CVE-2026-62108 Critical 9.8 WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability 0.6%
  • CVE-2026-89027 Medium 6.5 miniOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication Downgrade 0.4%
  • CVE-2026-82229 High 7.1 WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-73351 High 7.1 WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-61979 High 8.1 WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability 0.4%
  • CVE-2026-61967 Critical 9.8 WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerability 0.5%
  • CVE-2026-28149 Critical 9.8 WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability 0.6%
  • CVE-2026-28148 Critical 9.8 WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability 0.3%
  • CVE-2026-28008 Critical 9.8 WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability 0.6%
  • CVE-2026-65520 Critical 9.3 WordPress WP OAuth Server plugin <= 6.2.0 - SQL Injection vulnerability 0.4%
  • CVE-2026-61957 High 7.1 WordPress miniorange otp verification plugin <= 5.5.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-65561 Medium 6.5 WordPress WordPress Social Login and Register plugin <= 7.8.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-59545 High 8.1 WordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerability 0.5%
  • CVE-2026-42731 Critical 9.8 WordPress miniorange otp verification plugin <= 5.4.9 - Privilege Escalation vulnerability 0.3%
  • CVE-2021-47979 High 8.8 WordPress Plugin Backup and Restore 1.0.3 Arbitrary File Deletion 0.4%
  • CVE-2025-68974 Medium 6.6 WordPress WordPress Social Login and Register plugin <= 7.7.0 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-54745 Medium 6.5 WordPress miniOrange's Google Authenticator Plugin <= 6.1.1 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-53561 Medium 6.5 WordPress Prevent files / folders access Plugin <= 2.6.0 - Path Traversal Vulnerability 0.4%
  • CVE-2025-54048 Critical 9.3 WordPress Custom API for WP <= 4.2.2 - SQL Injection Vulnerability 0.4%
  • CVE-2025-54049 Critical 9.9 WordPress Custom API for WP <= 4.2.2 - Privilege Escalation Vulnerability 0.4%
  • CVE-2025-31019 High 8.8 WordPress Password Policy Manager plugin <= 2.0.4 - Account Takeover vulnerability 0.6%
  • CVE-2025-47670 High 8.1 WordPress Social Login and Register plugin <= 7.6.10 - Local File Inclusion Vulnerability 0.7%
  • CVE-2025-47672 High 8.1 WordPress miniOrange Discord Integration plugin <= 2.2.2 - Local File Inclusion Vulnerability 0.7%