[■] Plugin de WordPress

miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

17 expedientes en el radar

Comprueba tu versión de miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator) Sólo las que se están explotando

[■] Registro

Vulnerabilidades (17)

4,3 Media

CVE-2026-111949: autenticación incorrecta en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

CVE-2026-111949

T−27d 19 oct. 2026
7,3 Alta

CVE-2026-77770: falta de autenticación en una función crítica en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

CVE-2026-77770

T−68d 8 sept. 2026
5,3 Media

CVE-2026-77771: autenticación incorrecta en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

CVE-2026-77771

T−68d 8 sept. 2026
3,1 Baja

CVE-2026-16619: vulnerabilidad en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

CVE-2026-16619

T−108d 30 jul. 2026
4,3 Media

CVE-2026-16036: vulnerabilidad en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

CVE-2026-16036

T−109d 29 jul. 2026
4,3 Media

CVE-2026-16035: falta de autorización en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

CVE-2026-16035

T−111d 27 jul. 2026
5,3 Media

CVE-2026-12695: vulnerabilidad en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

CVE-2026-12695

T−123d 15 jul. 2026
4,3 Media

CVE-2025-54745: falta de autorización en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

CVE-2025-54745

T−449d 23 ago. 2025
7,5 Alta

CVE-2022-4943: falta de autorización en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

CVE-2022-4943

T−1306d 19 abr. 2023
7,5 Alta

CVE-2022-44589: exposición de información sensible en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

CVE-2022-44589

T−1453d 23 nov. 2022
8,8 Alta

Falsificación de peticiones (CSRF) en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

T−1475d 1 nov. 2022
5,4 Media

CVE-2022-42461: falta de autorización en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

CVE-2022-42461

T−1476d 31 oct. 2022
6,3 Media

Falta de autorización en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

T−1521d 16 sept. 2022
6,1 Media

Cross-site scripting (XSS) en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

T−1602d 27 jun. 2022
5,5 Media

CVE-2022-1321: cross-site scripting (XSS) en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

CVE-2022-1321

T−1623d 6 jun. 2022
8,1 Alta

CVE-2022-0229: falta de autorización en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

CVE-2022-0229

T−1721d 28 feb. 2022
6,1 Media

Cross-site scripting (XSS) en miniOrange 2FA – Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator)

T−1923d 10 ago. 2021