Skip to content
OpenAdvisories

Vendor

miniOrange

52 known vulnerabilities.

Products

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) 5 WordPress Social Login and Register 5 miniorange otp verification 5 OAuth Single Sign On – SSO (OAuth Client) 4 Headless Single Sign On 3 SAML SP Single Sign On 3 miniOrange Discord Integration 2 Prevent files / folders access 2 Malware Scanner 2 WP OAuth Server 2 Custom API for WP 2 Page Restriction WordPress (WP) 2 Backup and Restore 1 miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor, OTP SMS and Email | Passwordless login 1 YourMembership Single Sign On – YM SSO Login 1 WordPress REST API Authentication (WordPress plugin) 1 OAuth Single Sign On Free 1 OAuth Single Sign On Standard 1 OAuth Single Sign On Premium 1 OAuth Single Sign On Enterprise 1 JWT Authentication for WP REST APIs 1 miniOrange WordPress SAML SSO Standard 1 miniOrange WordPress SAML SSO Premium 1 miniOrange WordPress SAML SSO Premium MulsiteSite 1 WP OAuth Server (WordPress plugin) 1 OAuth 2.0 client for SSO (WordPress plugin) 1 Password Policy Manager 1 WordPress REST API Authentication 1 miniOrange's Google Authenticator 1 LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login 1 miniOrange's Google Authenticator (WordPress plugin) 1 YourMembership Single Sign On 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2022-34155 Public exploit

    WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication

    Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) plugin allows Authentication Bypass.This issue affects OAuth Single Sign On – SSO (OAuth Client): from n/a through 6.23.3.

    miniOrange OAuth Single Sign On – SSO (OAuth Client)