WordPress Social Login

WordPress Social Login has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2023; 1 is fixed and 3 remain unpatched as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (100%).

1 of the records (25%) have a vendor fix, while 3 remain unpatched. The oldest unresolved one dates back to 2023.

4 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

5.6/ 10

Patch Coverage25%

Open

Fixed

Get automatic notifications for all WordPress Social Login vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2023-4773

WordPress Social Login <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Read the full analysis

Vulnerability Records

4 records


2023-09-05 00:00	WordPress Social Login <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode WordPress Social Login <= 3.0.4	`CVE-2023-4773`	6.4 Medium	István Márton	No
2023-05-31 00:00	WordPress Social Login <= 3.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting WordPress Social Login <= 3.0.4	`CVE-2023-34172`	4.4 Medium	yuyudhn	No
2023-05-31 00:00	WordPress Social Login <= 3.0.4 - Reflected Cross-Site Scripting WordPress Social Login <= 3.0.4	`CVE-2023-34023`	5.4 Medium	Nguyen Xuan Chien	No
2014-05-25 00:00	WordPress Social Login <= 2.1.5 - Cross-Site Scripting WordPress Social Login <= 2.1.5	`CVE-2014-4576`	6.1 Medium	Prajal Kulkarni	Yes

Showing 1–4 of 4 reports