CVE-2022-44589

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in miniOrange miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor, OTP SMS and Email | Passwordless login.This issue affects miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor, OTP SMS and Email | Passwordless login: from n/a through 5.6.1.

Score

CVSS 3.1 8.1 High

Status

Modified - audit@patchstack.com

Published

2023-12-29

Last modified

2026-04-28

Weaknesses

CWE-200

Affected products

• Google Authenticator (Miniorange)
• Minioranges Google Authenticator Wordpress Two Factor Authentication 2fa (Miniorange)
• Otp Sms And Email Passwordless Login (Miniorange)
• Two Factor (Miniorange)

References

• https://patchstack.com/database/vulnerability/miniorange-2-factor-authentication/wordpress-miniorange-two-factor-authen…