Otp Verification With Firebase vulnerabilities

2 known vulnerabilities in Otp Verification With Firebase from miniOrange. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Miniorange OTP Verification with Firebase: Authorization Bypass Through User-Controlled Key

  CVE-2024-9862Oct 17, 2024Cyberlord92

  The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 3.6.0. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorizati

• 8.1 High severity

  Miniorange OTP Verification with Firebase: Missing Authentication for Critical Functionality

  CVE-2024-9861Oct 17, 2024Cyberlord92

  The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.6.0. This is due to missing validation on the token being supplied during the otp login through the plugin. This makes