Social Login, Social Sharing by miniOrange

79 Quality Score

Active Installs

18/30

At 10,000 active installs the plugin has a modest footprint, far behind category leaders like Nextend at 200,000 and Site Kit at 5 million, which limits the size of the community testing edge cases.

Update Freshness

25/25

The plugin was updated on 2026-07-14 and is tested against WordPress 7.0.1, so compatibility is clearly current and the team is shipping changes.

User Rating

14/15

A 92 out of 100 across 356 ratings is a strong endorsement, though the smaller sample size means a handful of unhappy users can swing the number more than they would for a plugin with thousands of reviews.

Support Health

8/15

Only 2 total support threads with 0 resolved is a red flag, suggesting either very low support volume because the product is self-explanatory or that users who do post are not getting answers.

WP Compatibility

15/15

Tested with WordPress 7.0.1 and requiring only PHP 7.0 and WordPress 4.1, it covers an exceptionally wide range of environments without modern version gating.

Scores higher than 73% of indexed plugins

About

Social Login with Discord, Facebook, Google, Twitter, LinkedIn and 40+ apps. Social share & comments. Free, fast & easy! WooCommerce Integration.

Active Installs 10k+

Rating ★★★★½ 4.6/5

Last Updated 2026-09-17 9:57am GMT

Requires WordPress 4.4+

Tested Up To 7.1.1

Requires PHP 7.0+

Security History

14 known vulnerabilities, all patched

3 Critical 6 High 5 Medium

Most recent: August 28, 2026

View details ▸

Social Login, Social Sharing by miniOrange <= 7.8.2 - Unauthenticated Stored Cross-Site Scripting High

August 28, 2026 Patched in ["7.9.0"] CVE-2026-82229

miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting High

August 18, 2026 Patched in ["7.8.2"] CVE-2026-73351

miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

July 24, 2026 Patched in ["7.8.1"] CVE-2026-65561

miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP Flow Critical

July 10, 2026 Patched in ["7.8.0"] CVE-2026-12761

miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) < 7.8.0 - Unauthenticated Privilege Escalation via Account Takeover Critical

July 8, 2026 Patched in ["7.8.0"] CVE-2026-14300

Social Login and Register <= 7.7.0 - Authenticated (Administrator+) Local File Inclusion Medium

September 28, 2025 Patched in [] CVE-2025-68974

WordPress Social Login and Register <= 7.6.10 - Unauthenticated Local File Inclusion High

May 21, 2025 Patched in ["7.7.0"] CVE-2025-47670

miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon <= 200.3.9 - Authentication Bypass High

March 7, 2025 Patched in ["200.3.10"] CVE-2024-11087

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.6 - Authenticated (Subscriber+) Privilege Escalation High

November 9, 2023 Patched in ["7.6.7"] CVE-2023-47683

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass Critical

June 28, 2023 Patched in ["7.6.5"] CVE-2023-2982

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.5.14 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

February 15, 2023 Patched in ["7.6.0"] CVE-2023-23710

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.5.14 - Cross-Site Request Forgery High

February 15, 2023 Patched in ["7.5.15"] CVE-2023-23706

WordPress Social Login and Register <= 7.6.0 - Missing Authorization to Unauthenticated Arbitrary Content Deletion Medium

February 13, 2023 Patched in ["7.6.1"] CVE-2023-25455

WordPress Social Login and Register <=7.5.12 - Missing Authorization to Plugin Settings Update Medium

September 23, 2022 Patched in ["7.5.13"] CVE-2023-24375

What It Does

Adds social login and registration buttons to your WordPress site, letting visitors sign in with Discord, Google, Facebook, Twitter, LinkedIn, and 40+ other apps instead of creating a new password. It also bundles social sharing and commenting features, with WooCommerce compatibility for account integration at checkout. Setup is handled through the miniOrange dashboard where you connect each provider via OAuth credentials.

Who It's For

Best suited for small to mid-sized sites that want to lower registration friction and capture more email signups without building a custom OAuth integration. WooCommerce stores that want social login at checkout will get direct value, and membership or community sites where users prefer Discord or social logins over yet another password will benefit most.

Who Should Skip It

Large enterprises with in-house developers should skip this and build directly on a provider like Auth0 or Nextend, since vendor lock-in and limited support responsiveness become real risks at scale. Anyone running a single-author blog or low-traffic site where 99% of visitors are anonymous readers will see no meaningful benefit.

The Bottom Line

miniOrange Social Login and Register delivers on its core promise with a wide provider list, solid ratings, and recent maintenance, earning an overall quality score of 79.21 out of 100. The unresolved support threads and modest install base are real concerns for anyone relying on fast vendor help, but the product itself is functional and well rated by those who use it. It is a reasonable pick for WooCommerce stores and community sites that want social login without writing code, provided you can troubleshoot setup on your own.

Related Plugins

Site Kit by Google 94/100

Pick this instead if your priority is Google analytics, Search Console, and AdSense integration rather than social login, and you want a plugin backed by 5 million installs.

Widgets for Google Reviews 94/100

Choose this if you need to display Google Reviews on your site, since that is its core feature and it has 900,000 installs proving broad reliability.

GA Google Analytics 87/100

Go with this if you only need a lightweight Google Analytics connector without the broader tag suite that Site Kit ships.

OMGF (Optimize My Google Fonts) 86/100

Pick this if Google Fonts performance and GDPR compliance are your concern rather than login flows.

Nextend Social Login and Register 86/100

Choose this if you want the same social login use case from a more established vendor with 200,000 installs and a longer track record than miniOrange.