Miniorange.com vulnerabilities
We track 2 vulnerabilities in Miniorange.com products across 11 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2026.
2vulnerabilities
2critical
0high
0exploited
10.0average CVSS score
Latest Miniorange.com vulnerabilities
- 10.0 Critical severity
SAML SSO Free for Joomla extension for Joomla: Authorization Bypass Through User-Controlled Key
Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps < 6.4 - This is due t
- 10.0 Critical severity
miniOrange OAuth Client (free) extension for…: Authorization Bypass Through User-Controlled Key
Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak OAuth Single Sign-On (SSO) < 1.2.2, Single Sign-On for Educational Institutes < 1.2.2 - The manipula