miniOrange's Google Authenticator vulnerabilities
We track 1 vulnerability in miniOrange's Google Authenticator products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 21, 2022.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest miniOrange's Google Authenticator vulnerabilities
- 8.1 High severity
miniOrange's Google Authenticator: Cross-Site Request Forgery
The miniOrange's Google Authenticator WordPress plugin before 5.5 does not have proper authorisation and CSRF checks when handling the reconfigureMethod, and does not validate the parameters passed to it properly. As a result, unauthenticated users could delet