WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) vulnerabilities

3 known vulnerabilities in WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) from miniOrange. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  WordPress Social Login and Register (Discord…: Improper Privilege Management

  CVE-2023-47683May 17, 2024miniOrange

  Improper Privilege Management vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Privilege Escalation.This issue affects WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn): from n/a

• 9.8 Critical severity

  miniOrange Social Login and Register (Discord…: Authentication Bypass Using an Alternate Path or Channel

  CVE-2023-2982Jun 29, 2023Cyberlord92EPSS 46.2%

  The WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4. This is due to insufficient encryption on the user being supplied during a login v

• 8.8 High severity

  WordPress Social Login and Register (Discord…: Cross-Site Request Forgery

  CVE-2023-23706May 23, 2023miniOrange

  Cross-Site Request Forgery (CSRF) vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 versions.