{"vulnerability": "CVE-2026-85984", "sightings": [{"uuid": "bc65c39f-cf89-444b-b7a6-20f1d3c79dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwh3lobomz2r", "content": "\ud83d\udea8 CVE-2026-85984 \u2014 CVSS 9.8 CRITICAL\n\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authenti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85984\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T20:07:52.676531Z"}, {"uuid": "ea67f3ab-8f20-4918-a3fd-c780a17dd7db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwh6pbek3j2h", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cminiOrange OTP Login, Verification and SMS Notifications\u300d\u306e\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3002\u7ba1\u7406\u8005\u304c\u7279\u5b9a\u8a2d\u5b9a\u2026\nCVE-2026-85984 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-09-26T21:03:34.709701Z"}, {"uuid": "ea363b39-fa6a-44ab-b5ee-dde51a810936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhdjwsepw2o", "content": "CVE-2026-85984 - miniorange otp login, verification and sms notifications\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress can let someone sign in as an administrator without a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cyberlord92 #CVE #infosec", "creation_timestamp": "2026-09-26T22:30:04.585847Z"}, {"uuid": "90425d28-2bb7-425f-b23e-1c200cabdc14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhhtu7qqz2m", "content": "\ud83d\udd34 CVE-2026-85984 - Critical (9.8)\n\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85984/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T23:47:13.105166Z"}, {"uuid": "7af375d4-347d-4a73-bf9b-c08b3af70c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85984", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117340767866919057", "content": "CVE-2026-85984: CRITICAL auth bypass in miniOrange OTP Login plugin \u22645.5.5. Attackers can log in as admin with just a username if certain options are enabled. Disable risky settings and check vendor guidance. https://radar.offseq.com/threat/cve-2026-85984-cwe-287-improper-authentication-in-cyberlord92-miniorange-otp-login-verification-and-5c3999015784c4c9 #OffSeq #WordPress #CVE202685984", "creation_timestamp": "2026-09-27T03:00:26.254737Z"}, {"uuid": "5d3d75d4-2f8f-46fd-8e7a-8134fde584c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85984", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwhsng7xlp2j", "content": "miniOrange OTP Login plugin (\u22645.5.5) hit by CRITICAL auth bypass (CVE-2026-85984). Admin login possible with username only if risky options are enabled. Disable those settings ASAP. https://radar.offseq.com/threat/cve-2026-85984-cwe-287-improper-authentication-in-cyberlord92-miniorange-otp-login-...", "creation_timestamp": "2026-09-27T03:00:28.069730Z"}]}