miniOrange OTP Login, Verification and SMS Notifications vulnerabilities
3 known vulnerabilities in miniOrange OTP Login, Verification and SMS Notifications from Cyberlord92. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
miniOrange OTP Login, Verification and SMS…: Improper Authentication
The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the `mo_by_pass_login()` function. This is due to `mo_delay_otp_process()` short-circuiting the
- 9.8 Critical severity
miniOrange OTP Login, Verification and SMS…: Improper Authentication
The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass via the mo_wp_login_intent parameter in all versions up to, and including, 5.5.5. This is due to a missing password-intent guard in the ski
- 9.8 Critical severity
miniOrange OTP Login, Verification and SMS…: Missing Authorization
The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 5.5.1. This is due to the `um_reset_password_process_hook()