Plugin Auditor is now available inside WordPress. Download Ultimate Auditor

miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator) v6.3.1

WordPress Two-Factor Authentication (2FA) WordPress websites are frequently targeted by brute force attacks, credential stuffing attacks, phishing attempts, and unauthorized login attempts. Passwords...

Plugin Auditor is an independent service and is not affiliated with, endorsed by, or sponsored by miniOrange 2FA or its developer. Disclaimer.

  • Audit coverage Not yet audited newest version pending
  • On Plugin Auditor since Sep 13, 2026
  • Last audited Sep 13, 2026

Compatibility & requirements

The PHP and WordPress versions this plugin needs, and how current its version support is.

  • Requires PHP 5.3.0+
  • Requires WordPress 5.3.0+
  • Tested up to WP 7.0 WP 7.1.3 is current

Audit scores by category

125 checks

How this plugin scores across the six areas we audit, from security to accessibility.

  • 94 Passed
  • 25 Warnings
  • 6 Failed
Security 76/100
Needs Improvement

28 of 37 checks passed.

Code Quality 85/100
Good

52 of 61 checks passed.

Performance 75/100
Needs Improvement

9 of 12 checks passed.

Compatibility 50/100
Needs Improvement

3 of 6 checks passed.

Privacy 33/100
Poor

1 of 3 checks passed.

Accessibility 17/100
Poor

1 of 6 checks passed.

Code footprint

How much code ships in this plugin, and the file types that make it up.

View in detail

ZIP file size

2.1 MB

3.9 MB unzipped

Total files

279

across all file types

Lines of PHP

30,373

in 135 files Large

File types

  • PHP
  • PNG
  • JS
  • CSS
  • Other

Top issues

The most important findings from the latest audit, ordered by severity.

  • 0 Critical
  • 128 High
  • 117 Medium
  • 36 Low

This is a preview of notable findings. Full file-level results, line numbers and code context are in the scan.

View full report

How scores changed across versions

Across 30 audited versions of miniOrange 2FA – Two Factor Authentication for WordPress (OTP, SMS, Email, Google Authenticator), Security improved the most (+11). No category regressed over this span. The codebase shrank 16% in size.

Audited 5.8 → 6.2.8 · 30 versions

0 50 100 5.8 6.0.6 6.1.7 6.2.8

How issues changed across versions

Findings by severity for each audited version, so you can see which issues were fixed over time.

0 280 560 5.8 6.0.6 6.1.7 6.2.8

Download momentum

How fast this plugin is being installed lately, and whether that pace is rising or slowing.

Last 7 days

10,806

downloads

Today

654

downloads

Week over week

+469%

vs previous week

Month over month

+43%

vs previous month

Download trend: Growing. Abandonment risk: None.

Version intelligence

100% of installs run the current version

  • Other
  • v6.0
  • v6.1
  • v6.2

Ratings

384 ratings on WordPress.org

  • 5 328
  • 4 14
  • 3 2
  • 2 4
  • 1 36

Maintenance & history

How actively this plugin is kept up, from its last update to its release history.

Last updated

This month

Jul 24, 2026

Actively maintained

Release cadence

~ every 9 days

average between releases

Total releases

198

since Apr 2017 · 9 yrs

Contributors & developers

The people credited with building and maintaining this plugin.

Running miniOrange 2FA in Your Site?

Our latest audit of miniOrange 2FA v6.3.1 flagged 281 issues. Scan your own copy to see each one with its exact file, line number, and a recommended fix.

miniOrange 2FA and its trademarks are used only to identify the plugin analyzed and remain the property of their owners. This is an independent Plugin Auditor audit, not affiliated with, sponsored by, or endorsed by the plugin's developer. Metadata may come from WordPress.org; scores, findings, classifications, and visualizations are independently generated by Plugin Auditor. Full disclaimer.