CVE-2026-73351

WordPress versions up to 7.8.1 are vulnerable to an unauthenticated Cross Site Scripting (XSS) attack through the Social Login and Register feature, allowing attackers to inject malicious scripts. This vulnerability could lead to session hijacking, data theft, or defacement of the affected sites. Website administrators and security teams using these WordPress versions should prioritize immediate updates to mitigate potential exploitation.