Approved changes feed: RSS · Atom

cpe:2.3:a:miled:wordpress_social_login:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMiled (250b1e36-b7ce-5b21-9266-3e8c4d4bd1dc)
ProductWordpress Social Login (4c7cad08-c51b-5ef4-bf96-b476003e7bdc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4773 vulnerable 2026-06-08 06:16:14.538728 WordPress Social Login <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MEDIUM (6.4)
The WordPress Social Login plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wordpress_social_login_meta' shortcode in versions up to, and including, 3.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2023-09-06T03:28:19.694Z
Updated: 2026-04-08T17:18:05.017Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34172 vulnerable 2026-06-08 06:06:24.731684 WordPress WordPress Social Login Plugin <= 3.0.4 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Miled WordPress Social Login plugin <= 3.0.4 versions.
Published: 2023-08-30T14:12:46.542Z
Updated: 2026-04-28T16:08:28.204Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34023 vulnerable 2026-06-08 06:06:24.222481 WordPress WordPress Social Login Plugin <= 3.0.4 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Miled WordPress Social Login plugin <= 3.0.4 versions.
Published: 2023-08-30T14:25:02.811Z
Updated: 2026-04-28T16:08:27.095Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.