CVE-2026-65561

A cross-site scripting (XSS) vulnerability exists in the WordPress Social Login and Register plugin versions up to 7.8.0, allowing attackers to inject malicious scripts into web pages viewed by users with contributor roles. This could lead to unauthorized actions or data exposure for users interacting with compromised pages. WordPress site administrators using this plugin should prioritize applying updates to mitigate potential exploitation risks.