WP Vulnerability WatchVulnerability data as of September 7, 2026

Vulnerability alerts / August 31, 2026

Vulnerability in miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) — CVE-2026-82229

HighSeverity
CVSS 7.1
0.1%Estimated exploit probability
EPSS
10,000+ sitesInstalls
7.9.0Fixed in

What to do now

Update miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) to 7.9.0 or later.

Affected versions

  • Everything up to and including 7.8.2

Affected: miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) (plugin, miniorange-login-openid)

Check: The plugin on wordpress.org / Our record for miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn)

What the vulnerability is

Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.2 versions.

This description is reproduced verbatim from the public vulnerability record.

Sources

This page is compiled automatically from public databases. Accuracy is not guaranteed; confirm against the vendor advisory before acting.

See other alerts