CVE-2026-65542
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
Unauthenticated Broken Authentication vulnerability in Super Socializer plugin up to version 7.14.5. An unauthenticated attacker can bypass authentication mechanisms.
Risk Assessment
Potential unauthorized access to user accounts or administrative functions without credentials.
Recommendation
Update the Super Socializer plugin to the latest patched version.
Other vulnerabilities in Super Socializer
See all- CVE-2026-65544High
Unauthenticated Cross Site Scripting (XSS) vulnerability in Super Socializer plugin up to version 7.14.5. An unauthenticated attacker can inject malicious scripts.
- CVE-2026-11798Medium
The Super Socializer plugin for WordPress up to version 7.14.5 is vulnerable to Reflected Cross-Site Scripting via the 'heateor_mastodon_share' parameter due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts that execute when a user clicks a crafted link.
Original NVD description (English source)
Unauthenticated Broken Authentication in Super Socializer <= 7.14.5 versions.