Extension WordPress
Vulnérabilités Nextend Social Login and Register
Cette page rassemble les failles publiées pour Nextend Social Login and Register, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Nextend Social Login and Register
6 fiches
Nextend Social Login and Register <= 3.1.21 – Cross-Site Request Forgery to Unlink User Social Login
The Nextend Social Login and Register plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.21. This is due to missing or incorrect nonce validation on the 'unlinkUser' function. This makes…
*-3.1.21
3.1.22
27/11/2025
Nextend Facebook Connect <= 3.1.19 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Nextend Facebook Connect plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.1.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access…
*-3.1.19
3.1.20
22/09/2025
Nextend Social Login and Register <= 3.1.12 – Reflected Self-Based Cross-Site Scripting via error_description
The Nextend Social Login and Register plugin for WordPress is vulnerable to a self-based Reflected Cross-Site Scripting via the ‘error_description’ parameter in all versions up to, and including, 3.1.12 due to insufficient input sanitization and output escaping. This…
*-3.1.12
3.1.13
01/03/2024
Nextend Facebook Connect <= 1.5.8 – Cross-Site Request Forgery
The Nextend Facebook Connect plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.8. This is due to missing nonce validation on the store_settings() function. This makes it possible for unauthenticated attackers…
*-1.5.8
1.5.9
15/03/2016
Nextend Social Login and Register <= 1.5.5 – Reflected Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the new_fb_sign_button function in nextend-facebook-connect.php in Nextend Facebook Connect plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirect_to parameter.
[*, 1.5.6)
1.5.6
24/06/2015
Nextend Social Login and Register <= 1.5.0 – Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fb_login_button parameter in a newfb_update_options action.
[*, 1.5.1)
1.5.1
12/02/2014
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.