Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affect…

Published:

26 mei 2026 om 22:00:00

Alert date:

27 mei 2026 om 15:06:57

Source:

nvd.nist.gov

Web Technologies, Identity & Access

CVE-2026-42731 is an Incorrect Privilege Assignment vulnerability in the miniOrange OTP Verification WordPress plugin that allows privilege escalation. The vulnerability affects all versions from n/a through 5.4.9 and below. This type of vulnerability can allow attackers to gain elevated privileges within the affected system, potentially leading to unauthorized access and control. The issue is classified as high severity and affects a widely-used WordPress plugin for OTP verification functionality.

Technical details

Mitigation steps:

Affected products:

miniOrange OTP Verification