CVE-2026-73351
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register versions up to 7.8.1.
Risk Assessment
An attacker can inject malicious script that executes in the user's browser, potentially leading to data theft or session hijacking.
Recommendation
Update the WordPress Social Login and Register plugin to the latest version that includes the security fix.
Other vulnerabilities in WordPress Social Login and Register
See all- CVE-2026-65561Medium
The WordPress Social Login and Register plugin version 7.8.0 and earlier contains a Cross-Site Scripting (XSS) vulnerability for users with the Contributor role. A Contributor can inject malicious scripts.
- CVE-2026-82229High
Unauthenticated Cross Site Scripting (XSS) vulnerability exists in WordPress Social Login and Register versions up to 7.8.2.
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS