Medium
CVE-2026-77771
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 16
Reset filters
High
CVE-2026-77770
miniOrange 2FA – Two Factor Authentication for WordPress 5.3.24 - 6.3.0 - Missing Authorization to Unauthenticated Arbitrary Option Deletion
Low
CVE-2026-16619
miniOrange 2FA <= 6.2.7 - Two-Factor Authentication Bypass via Brute Force
Medium
CVE-2026-16036
miniOrange 2FA <= 6.2.6 - Two-Factor Authentication Bypass
Medium
CVE-2026-16035
miniOrange 2FA <= 6.2.6 - Missing Authorization
Medium
CVE-2026-12695
miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) < 6.2.6 - Two-Factor Authentication Bypass
Medium
CVE-2025-54745
miniOrange's Google Authenticator <= 6.1.1 - Missing Authorization
High
CVE-2022-4943
miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change
High
CVE-2022-44589
miniOrange's Google Authenticator <= 5.6.1 - Sensitive Data Exposure of Multifactor Backup Codes
High
ed117fb8-c13a-4088-aa33-8d44fc5dcf37
miniOrange's Google Authenticator <= 5.6.1 - Cross-Site Request Forgery to Malware Scan Termination
Medium
CVE-2022-42461
miniOrange's Google Authenticator <= 5.6.1 - Missing Authorization to Plugin Settings Change
Medium
52a03c45-1d65-43aa-b30f-13698019e05f
miniOrange's Google Authenticator <= 5.5.82 - Missing Authorization
Medium
bb929679-85bb-4d5b-9a99-e6081d55019f
miniOrange's Google Authenticator <= 5.5.7 - Reflected Cross-Site Scripting
Medium
CVE-2022-1321
miniOrange's Google Authenticator <= 5.5.5 - Authenticated (Admin+) Cross-Site Scripting
High
CVE-2022-0229
miniOrange's Google Authenticator <= 5.4.52 - Unauthenticated Arbitrary Options Deletion
Medium
f810326f-f84a-4066-aa28-5caa915ba877
miniOrange's Google Authenticator <= 5.4.39 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.