miniOrange WordPress Social Login and Register vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting miniOrange WordPress Social Login and Register: 4 record(s), with affected versions and fixes.
CVE-2026-82229
High · 7.1
CWE-79 Aug 31, 2026
WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.2 versions.
CVE-2026-73351
High · 7.1
CWE-79 Aug 18, 2026
WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.
CVE-2026-65561
Medium · 6.5
CWE-79 Jul 27, 2026
WordPress WordPress Social Login and Register plugin <= 7.8.0 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions.
CVE-2025-68974
Medium · 6.6
CWE-98 Dec 30, 2025
WordPress WordPress Social Login and Register plugin <= 7.7.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in miniOrange WordPress Social Login and Register miniorange-login-openid allows PHP Local File Inclusion.This issue affects WordPress Social Login and Register: from n/a through <= 7.7.0.