CVE-2026-61967

The vulnerability allows unauthenticated users to escalate privileges in the miniOrange OTP Verification plugin for versions up to 5.5.1, potentially granting them unauthorized access to sensitive functionalities. Organizations using this plugin should prioritize immediate remediation due to the critical severity rating, as exploitation could lead to significant security breaches.