https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T15:07:37.800071+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-253076 EUVD-2026-253076 2026-10-14T15:07:37.802477+00:00 EUVD-2026-253076 https://cve.radiocsirt.org/vuln/fkie_cve-2025-7665 fkie_cve-2025-7665 2026-10-14T15:07:37.802531+00:00

The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'handle_mofirebase_form_options' function in versions 3.1.0 to 3.6.2. This makes it possible for unauthenticated attackers to update the default role to Administrator. Premium features must be enabled in order to exploit the vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-hcv9-m953-vpqw GHSA-hcv9-m953-vpqw 2026-10-14T15:07:37.802587+00:00

The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'handle_mofirebase_form_options' function in versions 3.1.0 to 3.6.2. This makes it possible for unauthenticated attackers to update the default role to Administrator. Premium features must be enabled in order to exploit the vulnerability.