| CVE-2026-111949 |
The miniOrange 2FA WordPress plugin before 6.3.1 does not prevent a pending passkey login from registering an…
|
7.5
Élevée
|
21 oct. 2026 |
| CVE-2026-77770 |
The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not require a…
|
10.0
Critique
|
10 sept. 2026 |
| CVE-2026-77771 |
The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not scope its…
|
7.5
Élevée
|
10 sept. 2026 |
| CVE-2026-16619 |
The miniOrange 2FA WordPress plugin before 6.2.8 does not correctly limit the number of second-factor verification…
|
7.5
Élevée
|
6 août 2026 |
| CVE-2026-16036 |
The miniOrange 2FA WordPress plugin before 6.2.7 does not bind the second factor being configured during the…
|
7.5
Élevée
|
5 août 2026 |
| CVE-2026-16035 |
The miniOrange 2FA WordPress plugin before 6.2.7 does not restrict who can trigger its second-factor configuration…
|
4.3
Moyenne
|
4 août 2026 |
| CVE-2026-12695 |
The miniOrange 2FA WordPress plugin before 6.2.6 does not validate the submitted one-time password against the targeted…
|
8.1
Élevée
|
31 juil. 2026 |