All products
miniorange-login-openid
WordPress · Plugin14 reports| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|
| Social Login, Social Sharing by miniOrange <= 7.8.2 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-82229 |
miniorange-login-openid |
WordPress |
High
|
Fix reported |
|
| miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.8.1 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-73351 |
miniorange-login-openid |
WordPress |
High
|
Fix reported |
|
| miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) < 7.8.0 - Unauthenticated Privilege Escalation via Account TakeoverCVE-2026-14300 |
miniorange-login-openid |
WordPress |
Critical
|
Fix reported |
|
| miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-65561 |
miniorange-login-openid |
WordPress |
Medium
|
Fix reported |
|
| miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP FlowCVE-2026-12761 |
miniorange-login-openid |
WordPress |
Critical
|
Fix reported |
|
| Social Login and Register <= 7.7.0 - Authenticated (Administrator+) Local File InclusionCVE-2025-68974 |
miniorange-login-openid |
WordPress |
Medium
|
No fix reported |
|
| WordPress Social Login and Register <= 7.6.10 - Unauthenticated Local File InclusionCVE-2025-47670 |
miniorange-login-openid |
WordPress |
High
|
Fix reported |
|
| miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon <= 200.3.9 - Authentication BypassCVE-2024-11087 |
miniorange-login-openid |
WordPress |
High
|
Fix reported |
|
| WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.5.14 - Cross-Site Request ForgeryCVE-2023-23706 |
miniorange-login-openid |
WordPress |
High
|
Fix reported |
|
| WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.5.14 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2023-23710 |
miniorange-login-openid |
WordPress |
Medium
|
Fix reported |
|
| WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.6 - Authenticated (Subscriber+) Privilege EscalationCVE-2023-47683 |
miniorange-login-openid |
WordPress |
High
|
Fix reported |
|
| WordPress Social Login and Register <=7.5.12 - Missing Authorization to Plugin Settings UpdateCVE-2023-24375 |
miniorange-login-openid |
WordPress |
Medium
|
Fix reported |
|
| WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication BypassCVE-2023-2982 |
miniorange-login-openid |
WordPress |
Critical
|
Fix reported |
|
| WordPress Social Login and Register <= 7.6.0 - Missing Authorization to Unauthenticated Arbitrary Content DeletionCVE-2023-25455 |
miniorange-login-openid |
WordPress |
Medium
|
Fix reported |
|
