CVE-2026-65544

HighCVSS 7.1

Published: 06/08/2026(UTC)Updated: 12/08/2026(UTC)Translated: 06/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

Unauthenticated Cross Site Scripting (XSS) vulnerability in Super Socializer plugin up to version 7.14.5. An unauthenticated attacker can inject malicious scripts.

Risk Assessment

Potential script execution in admin browser, leading to session hijacking or data theft.

Recommendation

Update the Super Socializer plugin to the latest patched version.

Other vulnerabilities in Super Socializer

See all

CVE-2026-65542High
Unauthenticated Broken Authentication vulnerability in Super Socializer plugin up to version 7.14.5. An unauthenticated attacker can bypass authentication mechanisms.
CVE-2026-11798Medium
The Super Socializer plugin for WordPress up to version 7.14.5 is vulnerable to Reflected Cross-Site Scripting via the 'heateor_mastodon_share' parameter due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts that execute when a user clicks a crafted link.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Super Socializer <= 7.14.5 versions.