cleantalk
Vulnerabilities and Security Researches

Email Verification / SMS Verification / OTP Verification / OTP Authentication / WooCommerce Notification, CVE-2026-42731

CVE, Research URL

CVE-2026-42731

Published on
May 27, 2026
Research Description
Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through <= 5.4.9.
Affected versions
max 5.5.0.
Status
vulnerable