Skip to content
PluginCanary

miniOrange OTP Login, Verification and SMS Notifications

by miniOrange · 5,000+ active installs · Checked 3 Nov 2026
Healthy4 Warnings

Healthy: vulnerability published 15 Oct 2026, fixed in 5.6.0.

81/ 100 Canary Score
Sub-scores for miniOrange OTP Login, Verification and SMS Notifications
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 15 Oct 2026, fixed in 5.6.0. Update to version 5.6.0 or later.15 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 8 Oct 2026, fixed in 5.5.8. Update to version 5.5.8 or later.8 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 26 Sep 2026, fixed in 5.5.6. Update to version 5.5.6 or later.26 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 11 Aug 2026, fixed in 5.5.2. Update to version 5.5.2 or later.11 Aug 2026Evidence
  • InfoSEC-37 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
cyberlord9218 Dec 2015 to 25 Feb 2025, 192 commits
shrikantniras18 May 2022 to 30 Aug 2024, 52 commits
prashantbhivsane27 Feb 2023 to 27 Feb 2023, 1 commits
mowpmfa11 Dec 2024 to 26 Dec 2025, 28 commits
kanishtha25 Feb 2025 to 25 Feb 2025, 3 commits
miniorangewp21 Jan 2026 to 27 Oct 2026, 16 commits

6 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
23 days ago
Releases, 24 months
35
Tested up to
7.1 current
Requires PHP
5.3.0 supported 8.2+
Releases per quarter for miniOrange OTP Login, Verification and SMS Notifications
Q1 20242
Q2 20242
Q3 20242
Q4 20242
Q1 20252
Q2 20254
Q3 20256
Q4 20258
Q1 20263
Q2 20262
Q3 20266
Q4 20262

Last release 12 Oct 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
15 Oct 2026miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace State8.1<= 5.5.85.6.00
8 Oct 2026miniOrange OTP Login, Verification and SMS Notifications <= 5.5.7 - Unauthenticated Privilege Escalation7.3<= 5.5.75.5.80
26 Sep 2026miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter9.8<= 5.5.55.5.60
11 Aug 2026miniOrange OTP Login, Verification and SMS Notifications <= 5.5.1 - Unauthenticated Privilege Escalation9.8<= 5.5.15.5.20
27 Jul 2026miniorange otp verification <= 5.5.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 5.5.15.5.20
8 Jul 2026miniOrange OTP Login, Verification and SMS Notifications <= 5.5.1 - Authentication Bypass to Administrator Account Takeover via 'username_b' Parameter9.8<= 5.5.15.5.20
24 May 2026miniOrange OTP Login, Verification and SMS Notifications <= 5.4.9 - Unauthenticated Privilege Escalation9.8<= 5.4.95.5.00
14 Nov 2023miniorange otp verification <= 4.2.1 - Missing Authorization via dismiss_notice4.3<= 4.2.14.2.20

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.7 from 439 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star404
4 star6
3 star4
2 star3
1 star22

Momentum

5,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for miniOrange OTP Login, Verification and SMS Notifications
4 May 2026552
11 May 2026660
18 May 2026885
25 May 20261,595
1 Jun 20262,384
8 Jun 2026785
15 Jun 2026572
22 Jun 2026477
29 Jun 20261,997
6 Jul 20261,237
13 Jul 2026629
20 Jul 2026500
27 Jul 20262,922
3 Aug 20262,726
10 Aug 2026780
17 Aug 2026514
24 Aug 20262,211
31 Aug 2026835
7 Sep 20262,534
14 Sep 2026997
21 Sep 2026845
28 Sep 20263,066
5 Oct 20263,242
12 Oct 20263,449
19 Oct 20261,157
26 Oct 20261,066
2 Nov 2026118

Weekly downloads over the last 4 weeks are 1% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

LoginizerScore 93 · 1,000,000+FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social LoginScore 93 · 10,000+All In One LoginScore 92 · 60,000+WPS Hide LoginScore 91 · 2,000,000+Temporary Login Without PasswordScore 91 · 90,000+

Facts

Version5.6.0
AuthorminiOrange
Added18 Dec 2015
Last updated12 Oct 2026
Active installs5,000+
Requires WordPress4.7.0
Tested up to7.1.4
Requires PHP5.3.0
CategoryUser Management & Authentication > User Registration & Login
Tagsotp, otp login, sms notifications, email verification, phone verification

Other plugins by this author: miniOrange 2FA - Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator), SAML Single Sign On - SSO Login, Social Login, Social Sharing by miniOrange, JWT Authentication for WP REST APIs, Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents, OAuth Single Sign On - SSO (OAuth Client), Password Policy Manager, Active Directory Integration / LDAP Integration, Custom API for WP, Prevent Files / Folders Access, WP OAuth Server ( Login with WordPress ), Page and Post Restriction

Questions

Is miniOrange OTP Login, Verification and SMS Notifications still maintained?

miniOrange OTP Login, Verification and SMS Notifications was last updated on 12 Oct 2026. Its Canary status is Healthy.

Is miniOrange OTP Login, Verification and SMS Notifications safe?

miniOrange OTP Login, Verification and SMS Notifications has no open unpatched vulnerabilities on record. 7 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns miniOrange OTP Login, Verification and SMS Notifications?

The wordpress.org author is miniOrange. Recent committers: miniorangewp, mowpmfa, cyberlord92, kanishtha, shrikantniras. We have recorded no ownership change.

What can I use instead of miniOrange OTP Login, Verification and SMS Notifications?

Plugins in the same category with a higher Canary Score: Loginizer, FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login, All In One Login, WPS Hide Login, Temporary Login Without Password.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue