目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

miniOrange 厂商漏洞列表 / CVE 中文分析 46

miniOrange 厂商相关 46 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

miniOrange 主要提供身份认证与访问管理解决方案，涵盖 SSO、MFA 及目录服务集成。其软件历史上频繁出现远程代码执行、跨站脚本及越权访问等高危漏洞，累计收录 29 条 CVE。部分版本因缺乏严格的输入验证导致攻击者可直接获取系统权限。该厂商需持续强化代码审计与补丁更新机制，以应对日益复杂的身份认证攻击面，确保企业级安全合规。

Top products by miniOrange: WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) WordPress Social Login and Register miniorange otp verification Headless Single Sign On OAuth Single Sign On – SSO (OAuth Client) Prevent files / folders access Custom API for WP Malware Scanner miniOrange Discord Integration SAML SP Single Sign On JWT Authentication for WP REST APIs WP OAuth Server Backup and Restore miniOrange's Google Authenticator Password Policy Manager WordPress REST API Authentication YourMembership Single Sign On miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor, OTP SMS and Email | Passwordless login YourMembership Single Sign On – YM SSO Login LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login OAuth Single Sign On Free WordPress REST API Authentication (WordPress plugin) miniOrange WordPress SAML SSO Standard miniOrange's Google Authenticator (WordPress plugin) OAuth 2.0 client for SSO (WordPress plugin) WP OAuth Server (WordPress plugin)
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-97274 WordPress OAuth SSO插件7.1.2绕过漏洞 — OAuth Single Sign On – SSO (OAuth Client) CWE-290 9.8 Critical 2026-09-30
CVE-2026-97267 WordPress插件2.6.7访问控制漏洞 — Prevent files / folders access CWE-862 4.3 Medium 2026-09-30
CVE-2026-62108 WordPress Headless Single Sign On 1.7.0 认证失效漏洞 — Headless Single Sign On CWE-290 9.8 Critical 2026-09-17
CVE-2026-89027 miniOrange JWT认证 4.8.0 前认证降级漏洞 — JWT Authentication for WP REST APIs CWE-306 6.5 Medium 2026-09-15
CVE-2026-82229 miniOrange Social Login and Register 跨站脚本漏洞 — WordPress Social Login and Register CWE-79 7.1 High 2026-08-31
CVE-2026-73351 miniOrange Social Login and Register 跨站脚本漏洞 — WordPress Social Login and Register CWE-79 7.1 High 2026-08-18
CVE-2026-61979 miniorange saml sp single sign on 权限许可和访问控制问题漏洞 — SAML SP Single Sign On CWE-266 8.1 High 2026-08-13
CVE-2026-61967 miniorange otp verification 授权问题漏洞 — miniorange otp verification CWE-640 9.8 Critical 2026-08-13
CVE-2026-28148 WordPress Headless SSO Plugin for WP 加密问题漏洞 — Headless Single Sign On CWE-347 9.8 Critical 2026-08-13
CVE-2026-28149 WordPress Headless SSO Plugin for WP 反序列化注入漏洞 — Headless Single Sign On CWE-502 9.8 Critical 2026-08-13
CVE-2026-28008 WordPress OAuth Single Sign On 授权问题漏洞 — OAuth Single Sign On – SSO (OAuth Client) CWE-290 9.8 Critical 2026-08-13
CVE-2026-65520 miniorange wp oauth server SQL注入漏洞 — WP OAuth Server CWE-89 9.3 Critical 2026-08-06
CVE-2026-61957 miniorange otp verification 跨站脚本漏洞 — miniorange otp verification CWE-79 7.1 High 2026-07-27
CVE-2026-65561 WordPress miniOrange Social Login and Register 跨站脚本漏洞 — WordPress Social Login and Register CWE-79 6.5 Medium 2026-07-27
CVE-2026-59545 WordPress miniOrange Discord Integration 授权问题漏洞 — miniOrange Discord Integration CWE-288 8.1 High 2026-07-23
CVE-2026-42731 WordPress plugin miniorange otp verification 安全漏洞 — miniorange otp verification CWE-266 9.8 Critical 2026-05-27
CVE-2021-47979 WordPress plugin Backup and Restore 路径遍历漏洞 — Backup and Restore CWE-22 8.8 High 2026-05-16
CVE-2025-68974 WordPress plugin WordPress Social Login and Register 安全漏洞 — WordPress Social Login and Register CWE-98 6.6 Medium 2025-12-30
CVE-2025-54745 WordPress plugin miniOranges Google Authenticator 安全漏洞 — miniOrange's Google Authenticator CWE-862 6.5 Medium 2025-12-18
CVE-2025-53561 WordPress plugin Prevent files / folders access 安全漏洞 — Prevent files / folders access CWE-35 6.5 Medium 2025-08-20
CVE-2025-54048 WordPress plugin Custom API for WP SQL注入漏洞 — Custom API for WP CWE-89 9.3 Critical 2025-08-20
CVE-2025-54049 WordPress plugin Custom API for WP 安全漏洞 — Custom API for WP CWE-266 9.9 Critical 2025-08-20
CVE-2025-31019 WordPress plugin Password Policy Manager 安全漏洞 — Password Policy Manager CWE-288 8.8 High 2025-06-09
CVE-2025-47670 WordPress plugin WordPress Social Login and Register 安全漏洞 — WordPress Social Login and Register CWE-98 8.1 High 2025-05-23
CVE-2025-47672 WordPress plugin miniOrange Discord Integration 安全漏洞 — miniOrange Discord Integration CWE-98 8.1 High 2025-05-23
CVE-2025-39545 WordPress plugin WordPress REST API Authentication 安全漏洞 — WordPress REST API Authentication CWE-862 5.4 Medium 2025-04-16
CVE-2023-41873 WordPress plugin SAML SP Single Sign On 安全漏洞 — SAML SP Single Sign On CWE-862 4.3 Medium 2024-12-13
CVE-2023-37987 WordPress plugin YourMembership Single Sign On 安全漏洞 — YourMembership Single Sign On CWE-862 6.5 Medium 2024-12-13
CVE-2023-24375 WordPress plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) 安全漏洞 — WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) CWE-862 3.5 Low 2024-12-09
CVE-2023-25455 WordPress plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) 安全漏洞 — WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) CWE-862 5.3 Medium 2024-12-09

本页汇总了 miniOrange 厂商截至目前公开的全部 46 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。