Wordpress Social Login And Register Discord Google Twitter Linkedin

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-2982 Jun 29, 02:15 CRITICAL POC THREAT Emergency

The WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 70.1%.

WordPress Authentication Bypass Google Wordpress Social Login And Register Discord Google Twitter Linkedin Wordpress Plugin +1

NVD VulDB

CVSS 3.1

9.8

EPSS

70.1%

Threat

5.6

CVE-2023-23706 May 23, 13:15 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 versions. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Google CSRF Wordpress Social Login And Register Discord Google Twitter Linkedin Miniorange

NVD

CVSS 3.1

8.8

EPSS

0.3%

CVE-2023-23710 Apr 25, 20:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Google Wordpress Social Login And Register Discord Google Twitter Linkedin Miniorange

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2023-2982

EPSS 70% 5.6 CVSS 9.8

CRITICAL POC THREAT Emergency

WordPress Authentication Bypass Google +3

NVD VulDB

CVE-2023-23706

EPSS 0% CVSS 8.8

HIGH This Week

WordPress Google CSRF +2

NVD

CVE-2023-23710

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Google +2

NVD