Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:miniorange:otp_login_verification_and_sms_notifications:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

Authentication Bypass in miniOrange OTP Login Plugin

An authentication bypass vulnerability in the miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress allows unauthenticated attackers to hijack user sessions.

OTP Login, Verification and SMS Notifications wordpress plugin authentication-bypass cve-2026-103895
1r 1t 1c
critical advisory

Authentication Bypass in miniOrange OTP Login Plugin

An authentication bypass vulnerability in the miniOrange OTP Login, Verification and SMS Notifications plugin allows unauthenticated attackers to log in as administrators by abusing a flawed login intent parameter.

OTP Login, Verification and SMS Notifications wordpress authentication-bypass cve-2026-85984
1r 1t 1c