New since your last visit
The summary is not available in this language yet. Original sources remain available below.
In brief
- CVE-2026-77770 miniOrange 2FA CVE POC miniOrange 2FA WordPress plugin miniorange-2-factor-authentication ≤ 6.3.0 — unauthenticated arbitrary WordPress option deletion via the email-verification link userID / Txid / accessToken.
- For authorized testing only.
- Do not run this against systems you do not own or have permission to test.
Timeline
2 sourcesTimeline
Sources
2 sources
This brief brings together multiple sources and is presented in this edition language. Source language: EN.