How many miniOrange google authenticator CVEs are in CISA KEV?

None of miniOrange google authenticator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of miniOrange google authenticator are affected?

9 distinct miniOrange google authenticator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in miniOrange google authenticator CVEs?

miniOrange google authenticator's CVEs most often map to these CWE weakness types: CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-264, CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

What is the average severity of miniOrange google authenticator CVEs?

The average CVSS base score across miniOrange google authenticator's scored CVEs is 6.9.

RadicalNotion.AI

Log in Start free

miniOrange

6 CVEs

miniOrange google authenticator Vulnerabilities

Name: miniOrange google authenticator vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for google authenticator by miniOrange.

6

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

3

Public exploits

PoC or exploit code

6.9

Avg CVSS

2022–2023

Last updated December 29, 2023

Overview

miniOrange google authenticator has 6 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting miniOrange google authenticator, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of miniOrange google authenticator's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High4

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of miniOrange google authenticator's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3

3 of miniOrange google authenticator's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every miniOrange google authenticator version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 5.6.22 CVEs
< 1.0.51 CVE
< 5.51 CVE
< 5.5.61 CVE
<= 5.6.51 CVE

Fixed in

5.6.22 CVEs
1.0.51 CVE
5.51 CVE
5.5.61 CVE

Find a version

6 CVEs

Sort

WordPress miniOrange's Google Authenticator Plugin <= 5.6.1 is vulnerable to Sensitive Data Exposure
CVE-2022-44589
Patch
CWE-200
High · CVSS 8.1
EPSS 0.7% (51th pct)2023-12-29
miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change
CVE-2022-4943CWE-862
High · CVSS 7.5
EPSS 0.5% (44th pct)2023-10-20
WordPress miniOrange's Google Authenticator plugin <= 5.6.1 - Broken Access Control vulnerability
CVE-2022-42461
Patch
CWE-264
High · CVSS 8.8
EPSS 0.7% (51th pct)2022-11-18
Medium vulnerability · 2022-06-27
CVE-2022-1321
Public exploit
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.6% (47th pct)2022-06-27
Medium vulnerability · 2022-06-27
CVE-2022-0875
Public exploit
Patch
CWE-352
Medium · CVSS 4.3
EPSS 0.4% (37th pct)2022-06-27
High vulnerability · 2022-03-21
CVE-2022-0229
Public exploit
Patch
CWE-352
High · CVSS 8.1
EPSS 0.6% (45th pct)2022-03-21

Common weakness types

The CWE weakness categories most often found in miniOrange google authenticator CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many miniOrange google authenticator CVEs were published each year.

2022

4

2023

2

Other miniOrange products

Browse vulnerabilities for other products by miniOrange.

active directory integration / ldap integration6 CVEs miniorange 2fa6 CVEs WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn)6 CVEs SAML SP Single Sign On5 CVEs WordPress Social Login and Register5 CVEs Malware Scanner4 CVEs miniorange otp verification4 CVEs oauth single sign on4 CVEs

All miniOrange vulnerabilities

Frequently asked questions

Common questions about miniOrange google authenticator vulnerabilities.

How many CVEs does miniOrange google authenticator have?: miniOrange google authenticator has 6 published CVE records since 2022.
How many miniOrange google authenticator CVEs are in CISA KEV?: None of miniOrange google authenticator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for miniOrange google authenticator vulnerabilities?: Yes — 3 of miniOrange google authenticator's CVEs have a known public exploit.
Which versions of miniOrange google authenticator are affected?: 9 distinct miniOrange google authenticator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in miniOrange google authenticator CVEs?: miniOrange google authenticator's CVEs most often map to these CWE weakness types: CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-264, CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
What is the average severity of miniOrange google authenticator CVEs?: The average CVSS base score across miniOrange google authenticator's scored CVEs is 6.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track miniOrange google authenticator vulnerabilities

Monitor new miniOrange google authenticator vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing