VulnSocial

CVE-2026-77770General

MEDIUMCVSS 10.0 · CRITICAL

Exploit discussion active in current signal (3 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not require a validated transaction before deleting site options whose names come from unauthenticated request input, allowing any visitor to delete arbitrary options, which can lock every administrator out of the dashboard or deactivate every miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 on the site.

Back to dashboard
4.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-862

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • Patch or workaround signal is available
  • 6 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 2 signals
  • PoC mentioned or linked in 4 signals
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked at 3 mentions on most recent observed day (2026-10-16)
  • 6 total mentions across 3 days

Deep dive

Activity timeline6 mentions / 3d
01223Mentions · 2026-09-11: 1Mentions · 2026-09-13: 2Mentions · 2026-10-16: 3PoC Mentioned / Linked · 2026-09-13: 2PoC Mentioned / Linked · 2026-10-16: 2Exploit Tool / Code · 2026-09-13: 1Exploit Tool / Code · 2026-10-16: 1Patch / Workaround · 2026-09-13: 1Technical Details · 2026-09-13: 1Technical Details · 2026-10-16: 109-1109-1310-16
Signal classification4 categories
General
233.3%
PoC
233.3%
Disclosure
116.7%
Exploit
116.7%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-09-111
General1
2026-09-132
Disclosure1PoC1
2026-10-163
Exploit1General1PoC1
Full discourse6 posts
  • Rıdvan Yağlı@ridvanyagli
    PoC

    🚨 WordPress miniOrange 2FA eklentisinde kritik güvenlik açığı CVE-2026-77770, miniorange-2-factor-authentication eklentisinin 6.3.0 ve önceki sürümlerini etkiliyor. 🔴 CVSS: 10.0 Critical 🔓 Kimlik doğrulama gerektirmiyor 💥 Saldırgan, özel hazırlanmış bir GET isteğiyle wp_options tablosundaki seçili kayıtları silebiliyor. 🛡️ Etkilenen sürümler: ≤ 6.3.0 ✅ Düzeltilen sürüm: 6.3.1 Açık için public PoC yayınlandı: https://github.com/cflowsec/CVE-2026-77770

    Post summary

    A critical CVE-2026-77770 in WordPress miniOrange 2FA allows unauthenticated deletion of wp_options records via a crafted GET request; a public PoC has been published and the issue is fixed in version 6.3.1.

    06031171.9K
    2.5K followersView on X
  • ExploitGrid@exploitgrid
    PoC

    💀CRITICAL Exploits Trending ├ CVE-2026-105134 + CVE-2026-105133 · Ahsay AhsayCBS · Auth bypass + RCE chain PoC live ├ CVE-2026-77770 · PoC live (10) ├ CVE-2020-25213 · PoC live(10) ├ CVE-2026-84411 · MikroTik · PoC live (9.8) └ CVE-2026-63223 · CodeIgniter4 · PoC live (9.8)

    Post summary

    The post highlights multiple CVEs with live Proof of Concept code available, focusing on the existence of PoCs rather than exploits, patches, or active exploitation.

    1000073
    406 followersView on X
  • ExploitGrid@exploitgrid
    Exploit

    [EXPLOIT] CVE-2026-77770 [CRITICAL/PoC] CVSS: 10 | Vendor: #Unknown CVE-2026-77770 🔗 https://exploitgrid.net/exploits/c5abd5bc-28c1-422a-a323-0bb3b23339f0

    Post summary

    The text announces CVE-2026-77770 as a critical vulnerability (CVSS 10) with an available exploit, linking to an exploit repository page on exploitgrid.net, but provides no patch or active exploitation evidence.

    1000062
    406 followersView on X
  • ExploitGrid@exploitgrid
    General

    ExploitGrid Daily Digest 🚨 Top Exploits: CVE-2026-77770 (CVSS: 10) Unknown CVE-2020-25213 (CVSS: 10) CVE-2026-105134, CVE-2026-105133 (CVSS: 8.4) Ahsay CVE-2026-63223 (CVSS: 9.8) codeigniter4 CVE-2026-84411 (CVSS: 9.8) mikrotik ..🧵👇

    Post summary

    The text is a brief digest listing several CVEs with CVSS scores and product names, but provides no PoC links, exploit tools, active exploitation evidence, patches, or technical vulnerability details.

    10000153
    406 followersView on X
  • cybrmonk@cybr_monk
    Disclosure

    CVE-2026-77770 Lets Anyone Wipe Your WordPress Site Settings with a Single Call https://cybrmonk.com/blog/cve-2026-77770-lets-anyone-wipe-your-wordpress-site-settings-with-a-single-call #cybersecurity #threatintelligence https://t.co/01JXUrRpej

    Post summary

    A new vulnerability (CVE‑2026‑77770) that permits attackers to wipe WordPress site settings with a single call has been disclosed via a blog link, but no active exploitation, patch, or exploit code is reported.

    0000045
    47 followersView on X
  • Cybersecurity News DE@cybsecuritynews
    General

    #schwachstellen CVE-2026-77770: UpdraftPlus-Plugin mit über 3 Millionen Installationen potenziell betroffen #cve202677770 #updraftpluswpbackupmigrationplugin #wordpress https://cybersecurity-news.de/cve-2026-77770-updraftplus-plugin-mit-ueber-3-millionen-installationen-potenziell-betroffen

    Post summary

    The tweet merely reports that the UpdraftPlus plugin, with over 3 million installations, may be affected by CVE‑2026‑77770, offering no technical specifics, PoC, patch information, or evidence of exploitation.

    0000039
    12 followersView on X

Explore more

Back to dashboard