WordPress Vulnerability Scanner WPSec
Vulnerabilities / miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator)

miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) vulnerabilities

Advisories WPSec published for miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator). Other sources may list more. Its attack surface: miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-01 WPSEC-2026-0214 miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) <= 6.3.1 - Unauthenticated Registration OTP Verification Bypass via Custom Registration Form Medium 5.3 6.3.2
2026-10-01 WPSEC-2026-0213 miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) <= 6.3.1 - Authenticated (Subscriber+) Two-Factor Authentication Bypass via Login Method Substitution and Grace-Period Skip High 8.1 6.3.2
2026-10-01 WPSEC-2026-0212 miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) <= 6.3.1 - Authenticated (Administrator+) Missing Authorization to Network-Wide 2FA Settings Modification on Multisite Low 3.3 6.3.2

License: CC BY 4.0