Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-25455 EUVD-2023-29410GHSA-pmr4-rq5x-jpmj

WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.6.0 - Arbitrary Content Deletion vulnerability

Published Dec 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn): from n/a through 7.6.0.

Affected products

VendorProductAffectedFixed
miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) ≤ 7.6.0 —

References