en
miniOrange is an identity and access management provider founded in 2012. It develops cloud and on-premise security products for authentication, authorization, and identity lifecycle management, including enterprise integrations and WordPress extensions. The company describes its customer base as global.
As of 11/08/2026, miniOrange recorded 17 security vulnerabilities in the last 90 days across 9 products, including 12 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Headless Single Sign On had the most security vulnerabilities in the miniOrange ecosystem, with 3 vulnerabilities—approximately 17.65% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2022-34858WordPress OAuth 2.0 client for SSO plugin <= 1.11.3 - Authentication Bypass vulnerabilityCVE-2022-34149WordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerability| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2022-34858WordPress OAuth 2.0 client for SSO plugin <= 1.11.3 - Authentication Bypass vulnerability | Exploitation statusNot exploited | FixYes | Affected productOAuth 2.0 client for SSO (WordPress plugin) | Published08/22/2022 | SeverityCritical |
CVE-2022-34149WordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerability | Exploitation statusNot exploited | FixYes | Affected productWP OAuth Server (WordPress plugin) |
52 Results | Page 2 of 2
| SeverityCritical |