Unknown miniOrange 2FA

2 known vulnerabilities in Unknown miniOrange 2FA, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-77771 CVSS 7.5 high The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not scope its second-factor attempt…
  • CVE-2026-77770 CVSS 10.0 critical The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not require a validated transaction…