[ Vendor · 5 CVEs ]
miniOrange
CVEs affecting miniOrange published in the last 30 days, plus any miniOrange CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114696 | 22 Oct 2026 | CVSS 5.3 | miniOrange Page Restriction WordPress (WP)Missing Authorization vulnerability in miniOrange Page Restriction WordPress (WP) page-and-post-restriction allows Exploiting Incorrectly Configured… | |
| CVE-2026-107433 | 14 Oct 2026 | CVSS 6.5 | miniOrange WP OAuth ServerMissing Authorization vulnerability in miniOrange WP OAuth Server miniorange-oauth-20-server allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-106610 | 10 Oct 2026 | CVSS 9.8 | miniorange otp verificationIncorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This… | |
| CVE-2026-97274 | 30 Sep 2026 | CVSS 9.8 | miniOrange OAuth Single Sign On – SSO (OAuth Client)Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 versions. | |
| CVE-2026-97267 | 30 Sep 2026 | CVSS 4.3 | miniOrange Prevent files / folders accessSubscriber Broken Access Control in Prevent files / folders access <= 2.6.7 versions. |