What’s Vulnerable › Products

cyberlord92 miniOrange OTP Login, Verification and SMS Notifications vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your cyberlord92 miniOrange OTP Login, Verification and SMS Notifications version is affected

Latest cyberlord92 miniOrange OTP Login, Verification and SMS Notifications vulnerabilities

• CVE-2026-103895 — miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace State (CVSS 8.1)
• CVE-2026-85984 — miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter (CVSS 9.8)
• CVE-2026-14245 — miniOrange OTP Login, Verification and SMS Notifications <= 5.5.1 - Authentication Bypass to Administrator Account Takeover via 'username_b' Parameter (CVSS 9.8)