Skip to content
OpenAdvisories

Vendor

cyberlord92

46 known vulnerabilities.

Products

Active Directory Integration / LDAP Integration 4 OAuth Single Sign On – SSO (OAuth Client) 4 Miniorange OTP Verification with Firebase 4 Page and Post Restriction 4 miniOrange OTP Login, Verification and SMS Notifications 3 SAML Single Sign On – SSO Login 3 miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) 3 Employee Directory – Staff Directory and Listing 2 Integrate Dynamics 365 CRM 2 Web Application Firewall – website security 2 PowerBI Embed Reports 2 Broken Link Checker | Finder 2 miniOrange OTP Verification and SMS Notification for WooCommerce 1 Login with YourMembership – YM SSO Login 1 SAML IDP (Identity Provider) – Login with Website Users 1 miniOrange 2FA – Two-Factor Authentication for WordPress (SMS, Email & Google Authenticator) 1 All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login 1 WP Login and Register using JWT 1 Password Policy Manager | Password Manager 1 User Sync 1 Malware Scanner 1 WordPress Single Sign-On (SSO) - Single Site Standard 1 WordPress Single Sign-On (SSO) - Single Site Premium 1 WordPress Single Sign-On (SSO) - Multisite Premium 1 WordPress Single Sign-On (SSO) - Single Site Enterprise 1 WordPress Single Sign-On (SSO) - Multisite Enterprise 1 WordPress Single Sign-On (SSO) - Single Site All-Inclusive 1 WordPress Single Sign-On (SSO) - Multisite All-Inclusive 1 Staff/Employee Business Directory for Active Directory 1 Web3 – Crypto wallet Login & NFT token gating 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-85984 Public exploit

    miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter

    The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass via the mo_wp_login_intent parameter in all versions up to, and including, 5.5.5. This is due to a missing password-intent guard in the sk…

    cyberlord92 miniOrange OTP Login, Verification and SMS Notifications Web / CMS
  • Critical 9.8
    CVE-2026-15981 Public exploit

    SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter

    The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.4. This is due to the mo_saml_validate_signature() function performing a loose boolean check on the raw tri-state integer…

    cyberlord92 SAML Single Sign On – SSO Login Web / CMS
  • Critical 9.8
    CVE-2026-15013 Public exploit

    SAML Single Sign On <= 5.4.3 - Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusion

    The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass via SAML Signature Algorithm Confusion in all versions up to, and including, 5.4.3. The vulnerability exists because `Mo_SAML_Utilities::mo_saml_cast_key()` reads …

    cyberlord92 SAML Single Sign On – SSO Login Web / CMS
  • Critical 9.8
    CVE-2025-9485 Public exploit

    OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()

    The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verificati…

    cyberlord92 OAuth Single Sign On – SSO (OAuth Client) Web / CMS
  • Medium 5.3
    CVE-2022-4539 Public exploit

    Web Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass

    The Web Application Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.1.2. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restr…

    cyberlord92 Web Application Firewall – website security Web / CMS
  • Critical 9.8
    CVE-2023-2982 Public exploit Scanner template EPSS 46%

    WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass

    The WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4. This is due to insufficient encryption on the user being supplied during a login …

    cyberlord92 miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Web / CMS