CVE-2023-4773




The WordPress Social Login plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wordpress_social_login_meta' shortcode in versions up to, and including, 3.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.


We have discovered 4,289 live websites that are affected by CVE-2023-4773.

Contact us to get more info



Affected Software

Product  WordPress Social Login
Category Wordpress Plugins
Vulnerable Versions
  • from 0 through 3.0.4
Total Vulnerable Versions28
Vulnerable Domains4,289 live websites (98.21% of WordPress Social Login install base)


Distribution by Website Rank

The diagram provides a graphic representation of the correlation between the occurrence of CVE-2023-4773 and the relative popularity of websites


Details

  • Published - Sep 6, 2023
  • Updated - Sep 6, 2023

Credits

  • Lana Codes (finder)




Countries

United States1,281 websites


Russia293 websites
Italy259 websites
France216 websites
Germany214 websites
Spain147 websites
GB133 websites
Canada96 websites
India96 websites
Poland90 websites

TLDs

.com2,030 websites
.ru218 websites
.org164 websites
.it163 websites
.net152 websites
.pl74 websites
.com.br74 websites
.de72 websites
.fr62 websites
.co.uk58 websites

Vulnerable Versions

Vulnerable versions are highlighted in red


Geographical Distribution

The distribution of websites across the globe that are exposed to CVE-2023-4773 through included software libraries and plugins.



References


Websites affected by CVE-2023-4773

Top websites that are affected by CVE-2023-4773. Please click on the "Contact us" button above to get more information.
DomainCountryRankContacts
************.com United States*,***
***.**************.org United States**,***
****************.com United States**,***
***.**********************.com United States**,***
**.ru Russia**,***
***.*********.com United States**,***
***.************.com Hong Kong***,***
***********.*************.com United States***,***
*******.us United States***,***
**************.com United States***,***
See full domain list