Browse CVEs

MEDIUM 6.1 CVE-2022-4496 The SAML SSO Standard WordPress plugin version 16.0.0 before 16.0.8, SAML SSO Premium WordPress plugin version 12.0.0 before 12.1.0 and SAML SSO Prem… Saml Sp Single Sign On 12.1.0 / 16.0.8+ Fix from $1,6002023-01-30 HIGH 7.5 CVE-2023-23749 The 'LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login' extension is vulnerable to LDAP Injection since is not properly san… Ldap Integration With Active Directory And Openldap Mitigation only Fix from $1,9502023-01-17 HIGH 8.8 CVE-2022-45073 Cross-Site Request Forgery (CSRF) vulnerability in REST API Authentication plugin <= 2.4.0 on WordPress. Wordpress Rest Api Authentication after 2.4.0 Fix from $1,9502022-11-18 HIGH 8.8 CVE-2022-42461 Broken Access Control vulnerability in miniOrange's Google Authenticator plugin <= 5.6.1 on WordPress. Google Authenticator 5.6.2+ Fix from $1,9502022-11-18 MEDIUM 6.5 CVE-2022-3082 The miniOrange Discord Integration WordPress plugin before 2.1.6 does not have authorisation and CSRF in some of its AJAX actions, allowing any logge… Discord Integration 2.1.6+ Fix from $1,6002022-10-17 CRITICAL 9.8 CVE-2022-34858 Authentication Bypass vulnerability in miniOrange OAuth 2.0 client for SSO plugin <= 1.11.3 at WordPress. Oauth 2.0 Client For Sso 1.11.4+ Fix from $2,3002022-08-22 CRITICAL 9.8 CVE-2022-34149 Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin <= 3.0.4 at WordPress. Wp Oauth Server after 3.0.4 Fix from $2,3002022-08-22 MEDIUM 5.3 CVE-2022-2133 The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to l… Oauth Single Sign On 6.22.6+ Fix from $1,6002022-07-17 HIGH 8.1 CVE-2022-0229 The miniOrange's Google Authenticator WordPress plugin before 5.5 does not have proper authorisation and CSRF checks when handling the reconfigureMet… Google Authenticator 5.5+ Fix from $1,9502022-03-21 HIGH 7.5 CVE-2021-36786 The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows Sensitive Data Exposure of API credentials and private keys. Saml 1.4.3+ Fix from $1,9502021-08-13 MEDIUM 5.4 CVE-2021-36785 The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows XSS. Saml 1.4.3+ Fix from $1,6002021-08-13 MEDIUM 6.1 CVE-2020-6850 Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php.… Saml Sp Single Sign On 4.8.84+ Fix from $1,6002020-02-17 MEDIUM 6.1 CVE-2019-12346 In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially crafted SAM… Saml Sp Single Sign On 4.8.73+ Fix from $1,6002019-06-24