Plugin icon

Nextend Social Login and Register

nextend-facebook-connect

Vulnerabilities:

6

Last Updated:

November 27, 2025

Active Installs:

200000

Published
Title
Fixed in
CVSS
Published
2025-11-27
Title
Nextend Social Login and Register < 3.1.22 - Cross-Site Request Forgery to Unlink User Social Login
Fixed in
Fixed in 3.1.22
CVSS
4.3 (medium)
Published
2025-09-22
Title
Nextend Facebook Connect < 3.1.20 - Contributor+ Stored XSS
Fixed in
Fixed in 3.1.20
CVSS
5.9 (medium)
Published
2024-03-01
Title
Nextend Social Login and Register < 3.1.13 - Reflected Self-Based Cross-Site Scripting via error_description
Fixed in
Fixed in 3.1.13
CVSS
5.4 (medium)
Published
2016-03-15
Title
Nextend Facebook Connect <= 1.5.7 - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 1.5.8
CVSS
n/a
Published
2015-06-24
Title
Nextend Facebook Connect < 1.5.6 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.5.6
CVSS
n/a
Published
2014-02-12
Title
Nextend Facebook Connect < 1.5.1 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.5.1
CVSS
n/a