Plugin icon

miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn)

miniorange-login-openid

Vulnerabilities:

8

Last Updated:

June 4, 2025

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2025-09-28
Title
Social Login and Register <= 7.7.0 - Authenticated (Administrator+) Local File Inclusion
Fixed in
No known fix
CVSS
6.6 (medium)
Published
2025-05-21
Title
WordPress Social Login and Register < 7.7.0 - Unauthenticated Local File Inclusion
Fixed in
Fixed in 7.7.0
CVSS
8.1 (high)
Published
2025-03-07
Title
miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon < 200.3.10 - Authentication Bypass
Fixed in
Fixed in 200.3.10
CVSS
8.1 (high)
Published
2023-11-09
Title
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) < 7.6.7 - Authenticated (Subscriber+) Privilege Escalation
Fixed in
Fixed in 7.6.7
CVSS
8.8 (high)
Published
2023-06-28
Title
WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) < 7.6.5 - Authentication Bypass
Fixed in
Fixed in 7.6.5
CVSS
9.8 (critical)
Published
2023-02-15
Title
WordPress Social Login and Register < 7.6.0 - Admin+ Stored XSS
Fixed in
Fixed in 7.6.0
CVSS
3.5 (low)
Published
2023-02-15
Title
WordPress Social Login and Register < 7.5.15 - Multiple CSRF
Fixed in
Fixed in 7.5.15
CVSS
4.3 (medium)
Published
2023-02-13
Title
WordPress Social Login and Register < 7.6.1 - Unauthenticated Arbitrary Content Deletion
Fixed in
Fixed in 7.6.1
CVSS
5.3 (medium)