CVE-2023-4773

CVE-2023-4773 applies to the WordPress plugin WordPress Social Login. It describes a Stored XSS via the wordpress_social_login_meta shortcode, exploitable by authenticated users with contributor+ permissions. Affected versions are up to 3.0.4; no patch status is indicated as available in the prov...

CVE-2014-4576

The CVE-2014-4576 entry describes a Cross-site scripting (XSS) vulnerability in the WordPress Social Login plugin. Affected component: diagnostics functionality in services/diagnostics.php. Impact: remote attackers can inject arbitrary web script or HTML via the xhrurl parameter in WordPress inst...