Input validation vulnerability in Nextend Social Login and Register 3.1.12

The Nextend Social Login and Register plugin for WordPress has a security issue where an attacker can insert harmful code into a webpage if they can trick a user into clicking on a link. This can happen if the user is logged in with a subscriber-level account and the plugin’s “Global Settings” have “Debug mode” enabled. This vulnerability can potentially allow an attacker to create an administrator-level account through a cross-site request forgery and social engineering tactics.