Skip to content
Threat Feed
Subscribe

Product

OTP Login, Verification and SMS Notifications (<= 5.5.8)

1 brief RSS
high advisory

Authentication Bypass in miniOrange OTP Login Plugin

An authentication bypass vulnerability in the miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress allows unauthenticated attackers to hijack user sessions.

OTP Login, Verification and SMS Notifications wordpress plugin authentication-bypass cve-2026-103895
1r 1t 1c