VDB
CVE-2023-23706
CVE-2023-23706
PUBLISHED
CVSS 5.099999904632568 MEDIUM
Cross-Site Request Forgery (CSRF) vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.5.14 versions.
EPSS 0.26% · 17.6th percentile
Risk Scores
CVSS 4.0
5.099999904632568
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS Score
0.26%
17.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| miniorange | wordpress_social_login_and_register_\(discord\,_google\,_twitter\,_linkedin\) | 0, 0 |
| miniOrange | WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) | n/a, * |
Timeline
- May 23, 2023 CVE Published
- May 24, 2023 EPSS Score
- Jun 30, 2023 EPSS Score
- Aug 5, 2023 EPSS Score
- Sep 11, 2023 EPSS Score
- Oct 17, 2023 EPSS Score
- Nov 23, 2023 EPSS Score
- Dec 29, 2023 EPSS Score
- Feb 4, 2024 EPSS Score
- Mar 11, 2024 EPSS Score
- Apr 17, 2024 EPSS Score
- May 24, 2024 EPSS Score