Skip to content
PluginCanary

Social Login, Social Sharing by miniOrange

by miniOrange · 10,000+ active installs · Checked 3 Nov 2026
Avoid1 Critical2 Warnings

Avoid: vulnerability published 7 Mar 2025 still has no fix after 14 days.

39/ 100 Canary Score

Capped at 39 while a vulnerability has no patch.

Sub-scores for Social Login, Social Sharing by miniOrange
Ownership100
Maintenance100
Security0
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 7 Mar 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.21 Mar 2025Evidence
  • WarningSEC-1Vulnerability published 28 Aug 2026, fixed in 7.9.0. Update to version 7.9.0 or later.28 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 18 Aug 2026, fixed in 7.8.2. Update to version 7.8.2 or later.18 Aug 2026Evidence
  • InfoSEC-38 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
cyberlord9229 May 2015 to 22 Apr 2021, 239 commits
unsolvedcontriver19 May 2021 to 2 Mar 2022, 16 commits
cyberorange25 May 2022 to 9 Aug 2024, 13 commits
kalpeshh23 Jan 2023 to 10 Feb 2023, 2 commits
teamwpminiorange21 May 2025 to 4 Mar 2026, 3 commits
mowpsamldev1 Jul 2026 to 17 Sep 2026, 6 commits

New committer mowpsamldev made a first commit on 1 Jul 2026.

Maintenance

Last release
48 days ago
Releases, 24 months
7
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter for Social Login, Social Sharing by miniOrange
Q1 20240
Q2 20241
Q3 20241
Q4 20240
Q1 20250
Q2 20252
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20265
Q4 20260

Last release 17 Sep 2026. Tested with WordPress 7.1 (current).

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
28 Aug 2026Social Login, Social Sharing by miniOrange <= 7.8.2 - Unauthenticated Stored Cross-Site Scripting7.2<= 7.8.27.9.00
18 Aug 2026miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 7.8.17.8.20
24 Jul 2026miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 7.8.07.8.10
10 Jul 2026miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP Flow9.8<= 7.7.07.8.00
8 Jul 2026miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) < 7.8.0 - Unauthenticated Privilege Escalation via Account Takeover9.8< 7.8.07.8.00
28 Sep 2025Social Login and Register <= 7.7.0 - Authenticated (Administrator+) Local File Inclusion6.6<= 7.7.0Not affectedn/a
21 May 2025WordPress Social Login and Register <= 7.6.10 - Unauthenticated Local File Inclusion8.1<= 7.6.107.7.015
7 Mar 2025miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon <= 200.3.9 - Authentication Bypass8.1<= 200.3.9No fixn/a
9 Nov 2023WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.6 - Authenticated (Subscriber+) Privilege Escalation8.8<= 7.6.67.6.713
28 Jun 2023WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass9.8<= 7.6.47.6.50
15 Feb 2023WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.5.14 - Cross-Site Request Forgery8.8<= 7.5.147.5.15n/a
15 Feb 2023WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.5.14 - Authenticated (Contributor+) Stored Cross-Site Scripting4.4<= 7.5.147.6.0n/a
13 Feb 2023WordPress Social Login and Register <= 7.6.0 - Missing Authorization to Unauthenticated Arbitrary Content Deletion5.3<= 7.6.07.6.1n/a
23 Sep 2022WordPress Social Login and Register <=7.5.12 - Missing Authorization to Plugin Settings Update6.57.5.127.5.130

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Social Login, Social Sharing by miniOrange
Q3 20245.0
Q4 20241.0
Q1 20254.5
Q2 20255.0

Average rating stayed at 5.0 between Q3 2024 and Q2 2025.

Rating distribution
5 star310
4 star11
3 star2
2 star2
1 star31
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Social Login, Social Sharing by miniOrange
4 May 2026325
11 May 2026732
18 May 2026626
25 May 2026661
1 Jun 2026514
8 Jun 2026599
15 Jun 2026517
22 Jun 2026496
29 Jun 20265,233
6 Jul 20262,543
13 Jul 20261,975
20 Jul 20266,545
27 Jul 20261,750
3 Aug 20261,891
10 Aug 20266,525
17 Aug 20262,245
24 Aug 20266,309
31 Aug 20261,885
7 Sep 20261,241
14 Sep 20266,478
21 Sep 20262,073
28 Sep 20261,359
5 Oct 20261,139
12 Oct 20261,061
19 Oct 20261,310
26 Oct 20261,092
2 Nov 2026194

Weekly downloads over the last 4 weeks are 57% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Login for Google Apps by WPAuthScore 91 · 10,000+Log in with GoogleScore 89 · 6,000+UsersWP - Social LoginScore 89 · 2,000+Nextend Social Login and RegisterScore 88 · 200,000+Wp Social Login and Register Social CounterScore 85 · 70,000+

Facts

Version7.9.1
AuthorminiOrange
Added29 May 2015
Last updated17 Sep 2026
Active installs10,000+
Requires WordPress4.4
Tested up to7.1.4
Requires PHP7.0
CategoryUser Management & Authentication > User Registration & Login
Tagsgoogle, facebook, LinkedIn, X(Twitter), social login

Other plugins by this author: JWT Authentication for WP REST APIs, SAML Single Sign On - SSO Login, miniOrange 2FA - Two Factor Authentication for WordPress (Passkey, OTP, SMS, Email, Google Authenticator), Secure MCP Server for Claude, ChatGPT, Gemini and other AI Agents, OAuth Single Sign On - SSO (OAuth Client), Password Policy Manager, miniOrange OTP Login, Verification and SMS Notifications, Active Directory Integration / LDAP Integration, Custom API for WP, Prevent Files / Folders Access, WP OAuth Server ( Login with WordPress ), Page and Post Restriction

Questions

Is Social Login, Social Sharing by miniOrange still maintained?

Social Login, Social Sharing by miniOrange was last updated on 17 Sep 2026. Its Canary status is Avoid.

Is Social Login, Social Sharing by miniOrange safe?

Social Login, Social Sharing by miniOrange has 1 published vulnerability with no patched version. Its Canary status is Avoid.

Who owns Social Login, Social Sharing by miniOrange?

The wordpress.org author is miniOrange. Recent committers: mowpsamldev, teamwpminiorange, cyberorange, kalpeshh, unsolvedcontriver. New committer mowpsamldev made a first commit on 1 Jul 2026.

What can I use instead of Social Login, Social Sharing by miniOrange?

Plugins in the same category with a higher Canary Score: Login for Google Apps by WPAuth, Log in with Google, UsersWP - Social Login, Nextend Social Login and Register, Wp Social Login and Register Social Counter.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue