CVE-2026-61967

Unauthenticated Privilege Escalation vulnerability in miniorange otp verification versions up to 5.5.1. An attacker can gain higher privileges without authentication.

Risk includes takeover of administrator accounts or other privileged roles, potentially leading to full system compromise.

Update the plugin to the latest patched version. Implement additional authentication mechanisms and restrict access to the admin panel.