Is this going to get fixed soon?
The Plugin “Social Login, Social Sharing by miniOrange” has a security vulnerability.Type: Plugin Vulnerable
Critical
The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 200.3.9. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username and the user does not have an already-existing account for the service returning the token.
]]>Hello!
Could you help me with this issue? I see that the hover tooltip from the title is not correct, it means that the tittle is the same in all social media. please let me know how to fix this: https://prnt.sc/QcnG37zBd8B3
i’m not using a premium account btw. thank you!
]]>Hi! I want support on this: My miniOrange plugin was working just fine but a few weeks ago it says:
Warning: Undefined variable $nonce in?—-\wp-content\plugins\miniorange-login-openid\mo-openid-social-login-functions.php?on line?1020
ERROR WPSL28: Please Go back and Refresh the page and try again!
If you still face the same issue please contact your Administrator.
I tried to unistall and reinstall but nothing works. Please help
I am using social login plugin in my wordpress website, and used login with gmail, which working fine after integration. From now, I am getting issue that when I login with gmail then after submit deatils it shows blank white screen of my website’s home page, I have used redirect to homepage after login, bur geeting this issue now.
Same issue in login with keycloak, I have used sso plugin from miniorange to integrate keycloak login but same issue in that, just show blank white screen after login.
Please help regarding this, my website is live and I have integrate more things like user sync and I have purchange mini orange wp user sync plugin for that, but first I need to solve this issue.
Thanks
I’m experiencing an issue with the miniOrange Social Login and Register plugin. When the website is loaded and scrolled down, it automatically scrolls back to the top once the page finishes loading, which is problematic for us. Normally, the page should remain at the scrolled position after loading.
When I deactivate the miniOrange Social Login and Register plugin, everything works perfectly.
Please note that this issue only occurs the first time the page is loaded; it works fine on subsequent visits.
Kindly look into this and let me know the resolution as soon as possible.
Thank you!
]]>Hi
I’m getting the error Invalid Request when trying to login with the social login buttons.
Please help.
]]>Is it possible to redirect to a $redirect_to parameter?
Do you have any filter or hook to control the login redirect?
Hi,
I have found one issue with plugin(latest) not sending emails ,when new user registered.
There is no To email ,for such emails.why is that?
I made sure this setting s ON https://imgur.com/a/52xfrCt
COuld you please check this
Thanks
]]>If a user register with social login it has not password set ,
now user cannot login as usual without plugin
Hi, My customers always get redirected to the link below after registration, when they click on the homepage URL…
You can try signing in to try it yourself.
Sign in: https://iaelimited.com/my-account/
]]>Hello,
I recently purchased the Custom Registration Form add-on for WordPress, but I am unable to use it. When I click the “Verify Key” button, nothing happens. How is the add-on supposed to be activate / or how to enter the website for the shortcode, when it’s blocked.
]]>Just recently our users began experiencing an error when trying to log in with the Discord login.
ERROR WPSL08: Please Go back and Refresh the page and try again!
If you still face the same issue please contact your Administrator.This occurs when the user uses the Discord login button, goes through authentication, and is returned to the website. At this time, the user is *not* logged in, and will typically click the button to log in a second time. Here is where the error is popping up. HOWEVER, if the user goes back in their browser or navigates back to the website, they ARE logged in.
Once again, here are the steps in the process:
- Click the login button
- Go through authentication successfully
- User is returned to the website in a logged out state
- Click login button again
- Error occurs
- User returns to website and is in a logged in state
This plugin used to support login with Microsoft, was that removed on purpose? I don’t see any mention in the changelog
]]>Twitter Login is not working. Please check this detailed information https//somup.com/cZeQbqpPsd
]]>Hi! I have a site on Woocommerce and use WordPress Social Login and Register to allow users to register via Google and Facebook. It seems that on register user is always redirected to main site language version, even if he was registering on secondary language page. I’m using WPML as a multilingual plugin. Is it possible to redirect to my-account page using the same language as user was signing up?
]]>I am having an issue with the Google login. I have this plugin setup on multiple other sites for SSO functionality only (name / email) and it works just fine. I have confirmed the miniOrange settings, security settings, Google Dev Console setup, everything. Between this site and my working site, everything is the same (except obviously the Secret & Client IDs, Callback URL), but I cannot figure out why this site is having issues.
When I look at the console I am getting a 500 (Internal) error.
The errors I get are:
- No profile data is returned from application. Please contact your administrator.
- I get this if there is no current authorization from Google to login (i.e. when I manually clear out the authorized apps in my Google Account or try a Google account that isn’t registered).
- Registration is disabled. Contact your admin.
- I get this if there is an authorization between Google and my website.
Hi,
I have integrated with LinkedIn OIDC for social logins using miniOrgange plugin.
Here are the two cases I tested where errors aren’t handled properly:
- In case the user is already registered using email id and then tries to use the same email id to login to linkedin (which is also their linkedin email id), it gives an error “string(16) “gdzmuv16eptyieAC” WP_Error Object ( [errors] => Array ( [existing_user_email] => Array ( [0] => Sorry, that email address is already used! ) ) [error_data] => Array ( ) [additional_data:protected] => Array ( ) )”
This test is displayed on the page as shown in this image: https://ibb.co/Krf71Zw
2. After clicking LinkedIn icon during registration, if the user decides to cancel, linkedin redirects user back to the website. But, the page shows up with text “The user cancelled LinkedIn login”.
Please see this image: https://ibb.co/PtfbQP6
Please confirm what can be done to handle and display them properly on the page where these calls were made?
Thanks,
Vinita
]]>hello
I made the Consumer Keys configuration on Twitter developer and link the API Key and Secret?with MiniOrange Social plugin, but when i click Save & Test Configuration it shows this error:
Something went wrong
You weren’t able to give access to the App. Go back and try logging in again.
can someone help me please.
here is screnshoot:
https://prnt.sc/yU-meZpqLJNZ
https://prnt.sc/vbxfxNl2_06z
https://prnt.sc/8mP42p1jwZXj
https://prnt.sc/cNahVFFFaKqK
Hello Team,
We are face the issues with linked login. For the login we are use Linkedin_oidc.
We follow the all step as mention in the document.
Error Message :- No profile data is returned from application. Please contact your administrator. https://prnt.sc/Lo2eAA99NGNf
Thanks!
hello there,
cant setup the login integration for the new X as the guide is fully out of date!
the API 2.0 is out, there are several changes cuss now there are
secrets
tokens
keys
all somehow need to be part of the login app
kind regards
No profile data is returned from application. Please contact your administrator.
]]>Hi,
is it possible to get a phone number using Google or Facebook login with WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) – WordPress plugin | www.remarpro.com
Thank you,
Grega
this error message in above image
]]>If new user logging in or registering everything is fine. But when existing user trying to login I’m getting this error message:
string(16) “APP SECRET(I replaced it)” WP_Error Object ( [errors] => Array ( [existing_user_email] => Array ( [0] => Sorry, that email address is already used! ) ) [error_data] => Array ( ) [additional_data:protected] => Array ( ) )
Error Code 5: There was an error in registration. Please contact your administrator.
So plugin trying to register insteed of login even I’m trying to login on login page. How to fix that?
]]>Hi MiniOrange Team,
I am using a free version of MiniOrange. I have followed all the steps as per your documentation. However, the LinkedIn oauth integration keeps giving error as “not enough permissions to access get:/me”
See screenshot: https://ibb.co/YDHgkCk
I have used scope params as profile+email+openid as per the new LinkedIn open id connect documentation. However, it appears that your plugin is calling /me api which is not in use anymore and it needs to instead call /userinfo.
Can you please confirm if the plugin works with the new open id connect provided by LinkedIn?
Thanks,
Vinita
]]>2 login details are appearing, how do I resolve them? What is the woocomerce configuration to change this? And how do I put it in the registration tab?
]]>When I logged into the website using Facebook social login, the plugin automatically created this strange email address, [email protected], which doesn’t actually exist. The email address I used for testing is from Gmail. And the Gmail address is already associated with an account on the website.
In addition, the avatar is also not working properly.
What could be the reason for this?
Hello, I got message, that this plugin has security problem with users privilegies: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/miniorange-login-openid/wordpress-social-login-and-register-discord-google-twitter-linkedin-766-authenticated-subscriber-privilege-escalation
Is this a current issue?
]]>I wonder if there are plans on updating the plugin or showing some care for it.
I got a license but I am not satisfied at all. I was expecting during this year to get more improvements and tweaks, and all I got is worse UI, the icons are not even showing… I get Jquery errors on my page, I guess because its JS is very old.
I use this plugin because initially it was great, and the only one with that many social login options, but it feels like it is going to be discontinued.
At least we would like to know if we can trust this plugin or if we should migrate.
]]>
Plugin contents are very old. It is so old that even the instructions are invalid when I want to install the discord system. I can’t install the system anyway.
Also, there are many errors in the interface. I can’t even look at the screen properly, it’s dark outside.
I had to uninstall the plugin after 5 minutes after installing it.