Threats Tagged 'cve-2026-14300'
View all threats tagged with 'cve-2026-14300'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-14300'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-14300: CWE-287 Improper Authentication in miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn)CVE-2026-14300 0 CVE-2026-14300 is an authentication vulnerability in the miniOrange Social Login and Register WordPress plugin (Discord, Google, Twitter, LinkedIn) before version 7.8.0. The flaw exists in the optional email-verification Profile Completion feature, where the one-time code is not bound to the intended account. This allows unauthenticated attackers to request a code for an email they control and replay it against a victim's email address to gain a valid session, including for administrator accounts. Exploitation requires the Profile Completion feature to be enabled and social login configured. Join the discussion | CVE Database V5 | 07/29/2026, 06:00:03 UTC Added: 07/29/2026, 06:37:45 UTC |
Showing 1 to 1 of 1 result