Skip to content
OpenAdvisories
Low · 3.5 CVE-2023-24375 EUVD-2023-28431GHSA-8rr9-98f9-jfm4

WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 - Broken Access Control vulnerability

Published Dec 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn): from n/a through 7.5.14.

Affected products

VendorProductAffectedFixed
miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) ≤ 7.5.14 —

References