CVE-2022-44589

HIGH 7.5CVE-2022-44589 · Published 29/12/2023 · updated 17/06/2026

In short

CVE-2022-44589 is a HIGH (CVSS 7.5) vulnerability affecting google authenticator (miniorange).
Chance of exploitation in the next 30 days (EPSS): 0.69%, higher than 53.0% of all vulnerabilities.
Fix: update to 5.6.2 or later.

Package	Affected versions	Patched versions
google authenticator miniorange	`< 5.6.2`	`5.6.2`

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in miniOrange miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor, OTP SMS and Email | Passwordless login.This issue affects miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor, OTP SMS and Email | Passwordless login: from n/a through 5.6.1.

References

patchstack.com/database/vulnerability/miniorange-2-factor-authentication/wordpress-miniorange-two-factor-authentication-plugin-5-6-1-sensitive-data-exposure-vulnerability · Third Party Advisory

More vulnerabilities in google authenticator

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

google authenticator

miniorange

< 5.6.2

5.6.2

Description

More vulnerabilities in google authenticator

See all →