CVE-2026-65544
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Unauthenticated Cross Site Scripting (XSS) vulnerability in Super Socializer plugin up to version 7.14.5. An unauthenticated attacker can inject malicious scripts.
Risk Assessment
Potential script execution in admin browser, leading to session hijacking or data theft.
Recommendation
Update the Super Socializer plugin to the latest patched version.
Other vulnerabilities in Super Socializer
See all- CVE-2026-65542High
Unauthenticated Broken Authentication vulnerability in Super Socializer plugin up to version 7.14.5. An unauthenticated attacker can bypass authentication mechanisms.
- CVE-2026-11798Medium
The Super Socializer plugin for WordPress up to version 7.14.5 is vulnerable to Reflected Cross-Site Scripting via the 'heateor_mastodon_share' parameter due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts that execute when a user clicks a crafted link.
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in Super Socializer <= 7.14.5 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS