CVE-2022-44589: Miniorange Google Authenticator

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in miniOrange miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor, OTP SMS and Email | Passwordless login.This issue affects miniOrange's Google Authenticator – WordPress Two Factor Authentication – 2FA , Two Factor, OTP SMS and Email | Passwordless login: from n/a through 5.6.1.

Affected products

• Miniorange Google Authenticator: before 5.6.2 (fixed in 5.6.2)

Published 2023-12-29. Last modified 2026-06-17.