Email Verification / SMS Verification / OTP Verification / OTP Authentication / WooCommerce Notification, CVE-2026-42731
- CVE, Research URL
- Home page URL
- Application
- Published on
- May 27, 2026
- Research Description
- Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through <= 5.4.9.
- Affected versions
-
max 5.5.0.
- Status
-
vulnerable