https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:38:34.882466+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-366151 EUVD-2026-366151 2026-10-08T18:38:34.932756+00:00 EUVD-2026-366151 https://cve.radiocsirt.org/vuln/fkie_cve-2026-77770 fkie_cve-2026-77770 2026-10-08T18:38:34.932799+00:00

The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not require a validated transaction before deleting site options whose names come from unauthenticated request input, allowing any visitor to delete arbitrary options, which can lock every administrator out of the dashboard or deactivate every miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 on the site.

 https://cve.radiocsirt.org/vuln/ghsa-vfpr-3q2h-v432 GHSA-vfpr-3q2h-v432 2026-10-08T18:38:34.932835+00:00

The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not require a validated transaction before deleting site options whose names come from unauthenticated request input, allowing any visitor to delete arbitrary options, which can lock every administrator out of the dashboard or deactivate every miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 on the site.