CVE-2023-2982criticalexploração observadaCWE-288

CVE-2023-2982: falha crítica em cyberlord92 miniOrange Social Login and…

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar miniOrange Social Login and Register

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

99Vexday Risk Score

Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.

ssvc Actcvss 9.8epss 46%
da publicação à armano mesmo dia
Publicada no NVD29 de jun.
1ª PoC29 de jun.
VulnCheck+172d
The WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4. This is due to insufficient encryption on the user being supplied during a login validated through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they know the email address associated with that user. This was partially patched in version 7.6.4 and fully patched in version 7.6.5.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
cyberlord92 · miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn)
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — cyberlord92 miniOrange Social Login and…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-12761CRITICALminiOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP FlowEPSS 0.9%CVE-2024-11087HIGHminiOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon <= 200.3.9 - Authentication BypassEPSS 0.5%