Medium 6.5
2025-12-18< 6.1.2
CVE-2025-54745
miniOrange 2FA – Two-Factor Authentication for WordPress (SMS, Email & Google Authenticator)
Minimum safe version
6.1.2
Update to 6.1.2 or later to address 13 fixable vulnerabilities
Latest available6.2.4 ✓
N/A
< 5.4.40
miniOrange's Google Authenticator < 5.4.40 - Reflected Cross-Site Scripting
N/A
< 5.5.75
miniOrange's Google Authenticator < 5.5.75 - Reflected Cross-Site Scripting
Medium 5.3
2023-10-20< 5.6.6
CVE-2022-4943
N/A
2021-08-10< 5.4.40
miniOrange's Google Authenticator <= 5.4.39 - Cross-Site Scripting
N/A
2022-06-27< 5.5.75
miniOrange's Google Authenticator <= 5.5.7 - Reflected Cross-Site Scripting
N/A
2022-09-16< 5.6.0
miniOrange's Google Authenticator <= 5.5.82 - Missing Authorization
N/A
2022-11-01< 5.6.2
miniOrange's Google Authenticator <= 5.6.1 - Cross-Site Request Forgery to Malware Scan Termination
High 8.1
2023-12-29< 5.6.2
CVE-2022-44589
Medium 5.4
2022-11-18< 5.6.2
CVE-2022-42461
N/A
2022-06-27< 5.5.75
WordPress miniOrange's Google Authenticator plugin <= 5.5.7 - Reflected Cross-Site Scripting (XSS) vulnerability
Medium 4.8
2022-06-27< 5.5.6
CVE-2022-1321
High 8.1
2022-03-21< 5.5
CVE-2022-0229