Miniorange OTP Verification with Firebase vulnerabilities
4 known vulnerabilities in Miniorange OTP Verification with Firebase from Cyberlord92. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
Miniorange OTP Verification with Firebase: Missing Authorization
The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'handle_mofirebase_form_options' function in versions 3.1.0 to 3.6.2. This makes it possible for unauthenticated a
- 9.8 Critical severity
Miniorange OTP Verification with Firebase: Incorrect Privilege Assignment
The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 3.6.0 due to the insecure 'administrator' default value for the 'default_user_role' option. This makes it possible for un
- 9.8 Critical severity
Miniorange OTP Verification with Firebase: Authorization Bypass Through User-Controlled Key
The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 3.6.0. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorizati
- 8.1 High severity
Miniorange OTP Verification with Firebase: Missing Authentication for Critical Functionality
The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.6.0. This is due to missing validation on the token being supplied during the otp login through the plugin. This makes