CVE-2023-25455 Information

Description

Missing Authorization vulnerability in miniOrange WordPress Social Login and Register (Discord Google Twitter LinkedIn) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Social Login and Register (Discord Google Twitter LinkedIn): from n/a through 7.6.0.

Reference

https://patchstack.com/database/wordpress/plugin/miniorange-login-openid/vulnerability/wordpress-wordpress-social-login-and-register-discord-google-twitter-linkedin-plugin-7-6-0-arbitrary-content-deletion-vulnerability?_s_id=cve