Otp Verification With Firebase

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-9862 Oct 17, 02:15 CRITICAL PATCH Act Now

The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 3.6.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

WordPress Authentication Bypass Wordpress Plugin Otp Verification With Firebase Miniorange

NVD

CVSS 3.1

9.8

EPSS

0.6%

CVE-2024-9861 Oct 17, 02:15 HIGH PATCH This Week

The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.6.0. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

WordPress Authentication Bypass Wordpress Plugin Otp Verification With Firebase Miniorange

NVD

CVSS 3.1

8.1

EPSS

0.6%

CVE-2024-9862

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

WordPress Authentication Bypass Wordpress Plugin +2

NVD

CVE-2024-9861

EPSS 1% CVSS 8.1

HIGH PATCH This Week

WordPress Authentication Bypass Wordpress Plugin +2

NVD