Medium · 4.3 CVE-2023-23706 EUVD-2023-27792GHSA-w67p-c8fh-jmjw

WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.5.14 is vulnerable to Cross Site Request Forgery (CSRF)

Published May 23, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: miniOrange Product: WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 versions.

Affected products

Vendor	Product	Affected	Fixed
miniOrange	WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn)	≤ 7.5.14	—

References

https://patchstack.com/database/vulnerability/miniorange-login-openid/wordpress-wordpress-social-login-and-register-discord-google-twitter-linkedin-plugin-7-5-14-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry