Known vulnerabilities in miniOrange Discord Integration

Integrate Discord with WordPress using OAuth. Enable Discord Login, role mapping, avatar sync, profile mapping, and SSO.

3Reported vulnerabilities

9.8Highest CVSS score

2.2.5Latest version

100+Active installs

What to do now

Update miniOrange Discord Integration to 2.2.5 or later. 3 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 21, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2022-3082	Medium 6.5	0.4%	Before 2.1.6	`2.1.6`	October 17, 2022
CVE-2025-47672	Critical 9.8	0.6%	2.2.2 and earlier	`2.2.3`	May 22, 2025
CVE-2026-59545	Medium 5.3	0.5%	2.2.4 and earlier	`2.2.5`	July 22, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.