Approved changes feed: RSS · Atom

cpe:2.3:a:miniorange:wordpress_social_login_and_register_(discord,_google,_twitter,_linkedin):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMiniorange (30ca830e-0f9b-52a7-9359-14c31196f049)
ProductWordpress Social Login And Register (Discord, Google, Twitter, Linkedin) (3353ab71-27aa-56d4-ac0c-d656adce2d03)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-47683 vulnerable 2026-06-03 14:53:17.957173 WordPress Social Login, Social Sharing by miniOrange plugin <= 7.6.6 - Authenticated Privilege Escalation vulnerability
HIGH (8)
Improper Privilege Management vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Privilege Escalation.This issue affects WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn): from n/a through 7.6.6.
Published: 2024-05-17T08:36:38.232Z
Updated: 2026-04-28T16:08:50.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25455 vulnerable 2026-06-03 14:49:32.531179 WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.6.0 - Arbitrary Content Deletion vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn): from n/a through 7.6.0.
Published: 2024-12-09T11:31:33.468Z
Updated: 2026-04-28T16:08:08.055Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24375 vulnerable 2026-06-03 14:49:29.567005 WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 - Broken Access Control vulnerability
LOW (3.5)
Missing Authorization vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn): from n/a through 7.5.14.
Published: 2024-12-09T11:31:41.294Z
Updated: 2026-04-28T16:08:05.219Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23710 vulnerable 2026-06-03 14:49:28.509233 WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 versions.
Published: 2023-04-25T19:41:40.424Z
Updated: 2026-04-28T16:08:00.924Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23706 vulnerable 2026-06-03 14:49:28.498725 WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.5.14 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 versions.
Published: 2023-05-23T12:41:37.545Z
Updated: 2026-04-28T16:08:00.794Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.