Google Authenticator vulnerabilities

2 known vulnerabilities in Google Authenticator from miniOrange. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  miniOrange's Google Authenticator – WordPress…: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2022-44589Dec 29, 2023miniOrange

  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in miniOrange miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor, OTP SMS and Email | Passwordless login.This issue affects miniOrange's Google Aut

• 8.1 High severity

  miniOrange's Google Authenticator: Cross-Site Request Forgery

  CVE-2022-0229Mar 21, 2022miniOrange's Google Authenticator

  The miniOrange's Google Authenticator WordPress plugin before 5.5 does not have proper authorisation and CSRF checks when handling the reconfigureMethod, and does not validate the parameters passed to it properly. As a result, unauthenticated users could delet