Vulnerabilidades do miniOrange WordPress Social Login and Register
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam miniOrange WordPress Social Login and Register: 4 registro(s), com versões afetadas e correções.
CVE-2026-82229
Alta · 7.1
CWE-79 31/08/2026
WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.2 versions.
CVE-2026-73351
Alta · 7.1
CWE-79 18/08/2026
WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.
CVE-2026-65561
Média · 6.5
CWE-79 27/07/2026
WordPress WordPress Social Login and Register plugin <= 7.8.0 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions.
CVE-2025-68974
Média · 6.6
CWE-98 30/12/2025
WordPress WordPress Social Login and Register plugin <= 7.7.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in miniOrange WordPress Social Login and Register miniorange-login-openid allows PHP Local File Inclusion.This issue affects WordPress Social Login and Register: from n/a through <= 7.7.0.