miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) vulnerabilities
We track 1 vulnerability in miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 29, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) vulnerabilities
- 8.1 High severity
miniOrange Social Login and Register (Discord…: Improper Authentication
The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) WordPress plugin before 7.8.0 does not bind the one-time code used by its optional email-verification (Profile Completion) feature to the account it was issued for, allowing unauthen