Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← back | CVE Intelligence

CVE-2026-61967

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-61967.

Vendor
miniOrange
Product
OTP Verification plugin for WordPress
Affected versions
5.5.1 and earlier; fixed in 5.5.2
Coverage Span
2026-08-15
Reports
1 related reports

Associated Reports & Timeline

1.
CVE-2026-61967 — miniOrange OTP Verification Ultimate Member Password Reset Authentication Bypass
aretiq.ai | research | | original ↗ | #ai-security | #authentication-bypass | #wordpress | #authentication
Aretiq analyzes CVE-2026-61967: miniOrange's OTP Verification plugin (≤5.5.1) skips OTP checks in Ultimate Member's password reset, letting unauthenticated attackers reset any account's password.
Why it matters: This research provides technical context that security teams can use for monitoring and validation.