{"vulnerability": "cve-2026-85984", "sightings": [{"uuid": "bc65c39f-cf89-444b-b7a6-20f1d3c79dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwh3lobomz2r", "content": "\ud83d\udea8 CVE-2026-85984 \u2014 CVSS 9.8 CRITICAL\n\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authenti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85984\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T20:07:52.676531Z"}, {"uuid": "ea67f3ab-8f20-4918-a3fd-c780a17dd7db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwh6pbek3j2h", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cminiOrange OTP Login, Verification and SMS Notifications\u300d\u306e\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3002\u7ba1\u7406\u8005\u304c\u7279\u5b9a\u8a2d\u5b9a\u2026\nCVE-2026-85984 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-09-26T21:03:34.709701Z"}, {"uuid": "ea363b39-fa6a-44ab-b5ee-dde51a810936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhdjwsepw2o", "content": "CVE-2026-85984 - miniorange otp login, verification and sms notifications\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress can let someone sign in as an administrator without a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cyberlord92 #CVE #infosec", "creation_timestamp": "2026-09-26T22:30:04.585847Z"}, {"uuid": "90425d28-2bb7-425f-b23e-1c200cabdc14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhhtu7qqz2m", "content": "\ud83d\udd34 CVE-2026-85984 - Critical (9.8)\n\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85984/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T23:47:13.105166Z"}, {"uuid": "7af375d4-347d-4a73-bf9b-c08b3af70c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85984", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117340767866919057", "content": "CVE-2026-85984: CRITICAL auth bypass in miniOrange OTP Login plugin \u22645.5.5. Attackers can log in as admin with just a username if certain options are enabled. Disable risky settings and check vendor guidance. https://radar.offseq.com/threat/cve-2026-85984-cwe-287-improper-authentication-in-cyberlord92-miniorange-otp-login-verification-and-5c3999015784c4c9 #OffSeq #WordPress #CVE202685984", "creation_timestamp": "2026-09-27T03:00:26.254737Z"}, {"uuid": "5d3d75d4-2f8f-46fd-8e7a-8134fde584c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85984", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwhsng7xlp2j", "content": "miniOrange OTP Login plugin (\u22645.5.5) hit by CRITICAL auth bypass (CVE-2026-85984). Admin login possible with username only if risky options are enabled. Disable those settings ASAP. https://radar.offseq.com/threat/cve-2026-85984-cwe-287-improper-authentication-in-cyberlord92-miniorange-otp-login-...", "creation_timestamp": "2026-09-27T03:00:28.069730Z"}, {"uuid": "d50d8509-9e9f-4a6c-90da-6aa709ae65e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://t.me/GithubRedTeam/103609", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-85984\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 04:26:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-85984 PoC: WordPress miniOrange OTP \u22645.5.5 unauth admin bypass (mo_wp_login_intent=otp + empty password). Check/exploit, user enum, colored CLI. https://pocbit.org/pocs/cve-2026-85984\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T05:00:08.000000Z"}, {"uuid": "ab5fc3b5-4a94-43c8-a16e-b5e2d3e11eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103609", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-85984\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 04:26:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-85984 PoC: WordPress miniOrange OTP \u22645.5.5 unauth admin bypass (mo_wp_login_intent=otp + empty password). Check/exploit, user enum, colored CLI. https://pocbit.org/pocs/cve-2026-85984\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T05:00:08.000000Z"}, {"uuid": "710dd7f9-6a85-45c7-af8d-db823fcd9d82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "Telegram/a0lInPmLZT-AAvB7437Ja2Nu6R6ocGw-E_CDkzhUlRx1eTo", "content": "", "creation_timestamp": "2026-09-28T15:00:07.000000Z"}, {"uuid": "efe64c32-81c8-4410-8a44-4fd0b10d9ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "published-proof-of-concept", "source": "Telegram/a0lInPmLZT-AAvB7437Ja2Nu6R6ocGw-E_CDkzhUlRx1eTo", "content": "", "creation_timestamp": "2026-09-28T15:00:07.000000Z"}]}