What’s Vulnerable › Products

miniOrange WordPress REST API Authentication (WordPress plugin) vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your miniOrange WordPress REST API Authentication (WordPress plugin) version is affected

Latest miniOrange WordPress REST API Authentication (WordPress plugin) vulnerabilities

• CVE-2025-39545 — WordPress REST API Authentication plugin <= 3.6.3 - Settings Change Vulnerability (CVSS 5.4)
• CVE-2022-45073 — WordPress REST API Authentication plugin <= 2.4.0 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 8.8)