CVE Catalog
CVE-2026-73351
HighCVSS 7.1Summary
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register versions up to 7.8.1.
Risk Assessment
An attacker can inject malicious script that executes in the user's browser, potentially leading to data theft or session hijacking.
Recommendation
Update the WordPress Social Login and Register plugin to the latest version that includes the security fix.
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.