Miniorange Wordpress Social Login And Register vulnerabilities

5 vulnerabilities

Known vulnerabilities in Miniorange Wordpress Social Login And Register, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.6CVE-2025-68974miniorangewordpress social login and register+1
EPSS score
0.48%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in miniOrange WordPress Social Login and Register miniorange-login-openid allows PHP Local File Inclusion.This issue affects WordPress Social Login and Register: from n/a through <= 7.7.0.8.1CVE-2025-47670miniorangewordpress social login and register+1
EPSS score
0.66%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in miniOrange WordPress Social Login and Register miniorange-login-openid allows PHP Local File Inclusion.This issue affects WordPress Social Login and Register: from n/a through <= 7.6.10.7.2CVE-2026-73351miniorangewordpress social login and register+1
EPSS score
0.25%
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.6.5CVE-2026-65561miniorangewordpress social login and register+1
EPSS score
0.22%
Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions.7.2CVE-2026-82229miniorangewordpress social login and register+1
EPSS score
0.25%
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.2 versions.