WordPress miniOrange 2FA Plugin Option Deletion Vulnerability

The miniOrange 2FA WordPress plugin, prior to versions 6.3.1 and 19.3, does not validate input before deleting site options, allowing any visitor to remove arbitrary options.

This can result in administrators being locked out of the dashboard or the plugin being deactivated.