Unrated severityNVD Advisory· Published Jul 2, 2014· Updated May 6, 2026
CVE-2014-4576
CVE-2014-4576
Description
Cross-site scripting (XSS) vulnerability in services/diagnostics.php in the WordPress Social Login plugin 2.0.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the xhrurl parameter.
Affected products
1- cpe:2.3:a:wordpress_social_login_project:wordpress_social_login:*:-:-:*:-:wordpress:*:*Range: <=2.0.3
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.