CVE-2026-14300

The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) WordPress plugin, in versions before 7.8.0 , is vulnerable to an unauthenticated account takeover . The root cause is a failure to bind the one-time code used by the optional email-verification (Profile Completion) feat...