WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability

Description

Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.

Affected Products

Vendor	Product	Versions
miniorange	wordpress social login and register	n/a

References

https://patchstack.com/database/wordpress/plugin/miniorange-login-openid/vulnerability/wordpress-wordpress-social-login-and-register-plugin-7-8-1-cross-site-scripting-xss-vulnerability?_s_id=cve(vdb-entry)

Related News (1 articles)

Tier C

VulDB7d ago

CVE-2026-73351 | miniOrange Social Login and Register Plugin up to 7.8.1 on WordPress cross site scripting

→ No new info (linked only)

CVSS 3.17.1 HIGH

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

CISA KEV❌ No

Actively exploited❌ No

CWECWE-79

PublishedAug 18, 2026

Trending Score10

Source articles1

Independent1

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-61979EXPKEV

WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability

Trending: 119

CRITICALCVE-2026-28148

WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability

Trending: 11

CRITICALCVE-2026-61967

WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerability

Trending: 11

CRITICALCVE-2026-28149

WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability

Trending: 11

CRITICALCVE-2026-28008

WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability

Trending: 11

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Aug 18, 2026

Discovered by ZDM

Aug 18, 2026