Vulnerabilities / miniOrange OTP Login, Verification and SMS Notifications
miniOrange OTP Login, Verification and SMS Notifications vulnerabilities
Advisories WPSec published for miniOrange OTP Login, Verification and SMS Notifications. Other sources may list more. Its attack surface: miniOrange OTP Login, Verification and SMS Notifications on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-10 | WPSEC-2026-0719 | miniOrange OTP Login, Verification and SMS Notifications <= 5.5.7 - Unauthenticated Authentication Bypass via Login OTP Phone Number | Critical 9.8 | 5.5.8 |
| 2026-10-10 | WPSEC-2026-0718 | miniOrange OTP Login, Verification and SMS Notifications <= 5.5.7 - Unauthenticated Two-Factor Authentication Bypass via Delay OTP Verification Setting | High 7.4 | 5.5.8 |
License: CC BY 4.0