Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior

Críticas / altas1447▲ 86 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

10 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-82229	Aplazada	Alta (7.1)	0.25%	—	Wordpress Social Login AND Register^AI	31/8/2026	1/9/2026	Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.2 versions.
CVE-2026-73351	Aplazada	Alta (7.1)	0.25%	—	Wordpress Social Login AND Register^AI	18/8/2026	20/8/2026	Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.
CVE-2026-65561	Aplazada	Media (6.5)	0.22%	—	Wordpress Social Login AND Register^AI	27/7/2026	27/7/2026	Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions.
CVE-2025-68974	Aplazada	Media (6.6)	0.48%	—	Miniorange Wordpress Social Login AND Register^AI	30/12/2025	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in miniOrange WordPress Social Login and Register miniorange-login-openid allows PHP Local File Inclusion.This issue affects WordPress Social Login and Register: from n/a through <= 7.7.0.
CVE-2025-47670	Aplazada	Alta (8.1)	0.64%	—	Miniorange Wordpress Social Login AND Register^AI	23/5/2025	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in miniOrange WordPress Social Login and Register miniorange-login-openid allows PHP Local File Inclusion.This issue affects WordPress Social Login and Register: from n/a through <= 7.6.10.
CVE-2023-25455	Aplazada	Media (5.3)	0.76%	—	Miniorange Wordpress Social Login AND Register^AI	9/12/2024	17/6/2026	Missing Authorization vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn): from n/a through 7.6.0.
CVE-2023-47683	Aplazada	Alta (8)	0.48%	—	Miniorange Wordpress Social Login AND Register^AI	17/5/2024	17/6/2026	Improper Privilege Management vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Privilege Escalation.This issue affects WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn): from n/a through 7.6.6.
CVE-2023-2982	Modificada	Crítica (9.8)	46%	💥 Exploit	Miniorange Wordpress Social Login AND Register (discord, Google, Twitter, Linkedin)	29/6/2023	17/6/2026	The WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4. This is due to insufficient encryption on the user being supplied during a login validated through the plugin. This makes it possible for…
CVE-2023-23706	Modificada	Alta (8.8)	0.26%	—	Miniorange Wordpress Social Login AND Register (discord, Google, Twitter, Linkedin)	23/5/2023	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 versions.
CVE-2023-23710	Modificada	Media (4.8)	0.37%	—	Miniorange Wordpress Social Login AND Register (discord, Google, Twitter, Linkedin)	25/4/2023	17/6/2026	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 versions.