How many miniOrange oauth single sign on CVEs are in CISA KEV?

None of miniOrange oauth single sign on's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of miniOrange oauth single sign on are affected?

12 distinct miniOrange oauth single sign on versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in miniOrange oauth single sign on CVEs?

miniOrange oauth single sign on's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication).

What is the average severity of miniOrange oauth single sign on CVEs?

The average CVSS base score across miniOrange oauth single sign on's scored CVEs is 6.8.

RadicalNotion.AI

Log in Start free

miniOrange

4 CVEs

miniOrange oauth single sign on Vulnerabilities

Name: miniOrange oauth single sign on vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for oauth single sign on by miniOrange.

4

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

4

Public exploits

PoC or exploit code

6.8

Avg CVSS

2022–2023

Last updated July 18, 2023

Overview

miniOrange oauth single sign on has 4 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 6.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting miniOrange oauth single sign on, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of miniOrange oauth single sign on's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of miniOrange oauth single sign on's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4

4 of miniOrange oauth single sign on's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every miniOrange oauth single sign on version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 6.24.22 CVEs
< 28.4.91 CVE
< 38.4.91 CVE
< 48.4.91 CVE
< 6.22.61 CVE
< 6.23.41 CVE

Fixed in

6.24.22 CVEs
28.4.91 CVE
38.4.91 CVE
48.4.91 CVE
6.22.61 CVE
6.23.41 CVE

Find a version

4 CVEs

Sort

WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication
CVE-2022-34155
Public exploit
Patch
CWE-287
High · CVSS 8.8
EPSS 1.0% (59th pct)2023-07-18
Medium vulnerability · 2023-03-27
CVE-2023-1092
Public exploit
Patch
Medium · CVSS 6.5
EPSS 0.4% (38th pct)2023-03-27
OAuth Single Sign On - SSO (OAuth Client) < 6.24.2 - IdP Discard via CSRF
CVE-2023-1093
Public exploit
Patch
Medium · CVSS 6.5
EPSS 0.3% (26th pct)2023-03-27
Medium vulnerability · 2022-07-17
CVE-2022-2133
Public exploit
Patch
CWE-287
Medium · CVSS 5.3
EPSS 1.2% (66th pct)2022-07-17

Common weakness types

The CWE weakness categories most often found in miniOrange oauth single sign on CVEs. Follow any weakness for its full explanation.

CWE-287Improper Authentication2 CVEs

Disclosure activity by year

How many miniOrange oauth single sign on CVEs were published each year.

2022

1

2023

3

Other miniOrange products

Browse vulnerabilities for other products by miniOrange.

active directory integration / ldap integration6 CVEs google authenticator6 CVEs miniorange 2fa6 CVEs WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn)6 CVEs SAML SP Single Sign On5 CVEs WordPress Social Login and Register5 CVEs Malware Scanner4 CVEs miniorange otp verification4 CVEs

All miniOrange vulnerabilities

Frequently asked questions

Common questions about miniOrange oauth single sign on vulnerabilities.

How many CVEs does miniOrange oauth single sign on have?: miniOrange oauth single sign on has 4 published CVE records since 2022.
How many miniOrange oauth single sign on CVEs are in CISA KEV?: None of miniOrange oauth single sign on's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for miniOrange oauth single sign on vulnerabilities?: Yes — 4 of miniOrange oauth single sign on's CVEs have a known public exploit.
Which versions of miniOrange oauth single sign on are affected?: 12 distinct miniOrange oauth single sign on versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in miniOrange oauth single sign on CVEs?: miniOrange oauth single sign on's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication).
What is the average severity of miniOrange oauth single sign on CVEs?: The average CVSS base score across miniOrange oauth single sign on's scored CVEs is 6.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track miniOrange oauth single sign on vulnerabilities

Monitor new miniOrange oauth single sign on vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing