PatchTheCVE: wordpress social loginhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-4773: The WordPress Social Login plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wordpreshttps://patchthecve.com/cve/CVE-2023-4773.htmlhttps://patchthecve.com/cve/CVE-2023-4773.htmlWed, 17 Jun 2026 06:38:34 +0000MEDIUM 6.4: The WordPress Social Login plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wordpress_social_login_meta' shortcode in versions up to, and including, 3.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authCVE-2023-34172: Authhttps://patchthecve.com/cve/CVE-2023-34172.htmlhttps://patchthecve.com/cve/CVE-2023-34172.htmlWed, 17 Jun 2026 06:03:03 +0000MEDIUM 5.9: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Miled WordPress Social Login plugin <= 3.0.4 versions.CVE-2023-34023: Unauthhttps://patchthecve.com/cve/CVE-2023-34023.htmlhttps://patchthecve.com/cve/CVE-2023-34023.htmlWed, 17 Jun 2026 06:02:44 +0000HIGH 7.1: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Miled WordPress Social Login plugin <= 3.0.4 versions.