https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T07:52:17.314432+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-4943 CVE-2022-4943 — miniOrange's Google Authenticator <= 5.6.5 - Missing Authorization to Plugin Settings Change 2026-10-18T07:52:17.315522+00:00

Affected: cyberlord92 miniOrange 2FA – Two-Factor Authentication for WordPress (SMS, Email & Google Authenticator)

The miniOrange's Google Authenticator plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when changing plugin settings in versions up to, and including, 5.6.5. This makes it possible for unauthenticated attackers to change the plugin's settings.