Advisories · Technology
miniOrange Headless Single Sign On.
Every CVE that names miniOrange Headless Single Sign On among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability
- miniOrange Headless Single Sign On
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability
- miniOrange Headless Single Sign On
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability
- miniOrange Headless Single Sign On
- Weak cryptography or TLS