miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) vulnerabilities
3 known vulnerabilities in miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) from Cyberlord92. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
miniOrange Social Login and Register (Discord…: Improper Authentication
The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass leading to account takeover in versions up to and including 7.7.0. This is due to the Profile Completion flow accepting an
- 9.8 Critical severity
miniOrange Social Login and Register (Discord…: Improper Authentication
The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 200.3.9. This is due to insufficient verification on the user being return
- 9.8 Critical severity
miniOrange Social Login and Register (Discord…: Authentication Bypass Using an Alternate Path or Channel
The WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4. This is due to insufficient encryption on the user being supplied during a login v