CVE-2026-65561

MediumCVSS 6.5

Published: 27/07/2026(UTC)Updated: 27/07/2026(UTC)Translated: 27/07/2026(UTC)NVD NIST

Summary

The WordPress Social Login and Register plugin version 7.8.0 and earlier contains a Cross-Site Scripting (XSS) vulnerability for users with the Contributor role. A Contributor can inject malicious scripts.

Risk Assessment

The risk involves script execution in other users' browsers, potentially leading to theft of login credentials or sessions.

Recommendation

Update WordPress Social Login and Register to a version newer than 7.8.0 that includes an XSS fix.

Other vulnerabilities in WordPress Social Login and Register

See all

CVE-2026-82229High
Unauthenticated Cross Site Scripting (XSS) vulnerability exists in WordPress Social Login and Register versions up to 7.8.2.
CVE-2026-73351High
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register versions up to 7.8.1.

Original NVD description (English source)

Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions.