WordPress security by component

miniOrange's Google Authenticator

Plugin description

miniOrange's Google Authenticator is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Dec 18, 2025; the highest CVE/CNA score is 8.1.

Plugin slug: miniorange-2-factor-authentication

Latest vulnerability

CVE-2025-54745: miniOrange's Google Authenticator: A security weakness

miniOrange's Google Authenticator is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedDec 18, 2025

Safe version guidanceSee mitigation notes

		Safe version
Dec 18, 2025	CVE-2025-54745 miniOrange's Google Authenticator: A security weakness miniOrange's Google Authenticator is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE6.5 NVDPending
Dec 29, 2023	CVE-2022-44589 miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor, OTP SMS and Email \| Passwordless login: A security weakness miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor, OTP SMS and Email \| Passwordless login is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE8.1 NVD7.5
Nov 18, 2022	CVE-2022-42461 Google Authenticator: A security weakness Google Authenticator is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.4 NVD8.8