Skip to content
OpenAdvisories
Medium · 5.9 CVE-2023-23710 EUVD-2023-27796GHSA-6c53-4r43-p32g

WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 is vulnerable to Cross Site Scripting (XSS)

Published Apr 25, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: miniOrange Product: WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Category: Web / CMS

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 versions.

Affected products

VendorProductAffectedFixed
miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) ≤ 7.5.14 —

References