Description
Broken Access Control vulnerability in miniOrange's Google Authenticator plugin <= 5.6.1 on WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| miniOrange | miniOrange's Google Authenticator (WordPress plugin) | <= 5.6.1 – ≤ 5.6.1 | — |
Medium · 5.4
CVE-2022-42461
EUVD-2022-45534GHSA-gpw5-5rh2-qhcm
WordPress miniOrange's Google Authenticator plugin <= 5.6.1 - Broken Access Control vulnerability
Published Nov 18, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack