| CVE-2026-111949 |
The miniOrange 2FA WordPress plugin before 6.3.1 does not prevent a pending passkey login from registering an…
|
7.5
High
|
Oct 21, 2026 |
| CVE-2026-77770 |
The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not require a…
|
10.0
Critical
|
Sep 10, 2026 |
| CVE-2026-77771 |
The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not scope its…
|
7.5
High
|
Sep 10, 2026 |
| CVE-2026-16619 |
The miniOrange 2FA WordPress plugin before 6.2.8 does not correctly limit the number of second-factor verification…
|
7.5
High
|
Aug 6, 2026 |
| CVE-2026-16036 |
The miniOrange 2FA WordPress plugin before 6.2.7 does not bind the second factor being configured during the…
|
7.5
High
|
Aug 5, 2026 |
| CVE-2026-16035 |
The miniOrange 2FA WordPress plugin before 6.2.7 does not restrict who can trigger its second-factor configuration…
|
4.3
Medium
|
Aug 4, 2026 |
| CVE-2026-12695 |
The miniOrange 2FA WordPress plugin before 6.2.6 does not validate the submitted one-time password against the targeted…
|
8.1
High
|
Jul 31, 2026 |