CVE-2025-13737 | Nextend Social Login and Register Plugin up to 3.1.21 on WordPress unlinkUser cross-site request forgery

A vulnerability was found in Nextend Social Login and Register Plugin up to 3.1.21 on WordPress. It has been declared as problematic. This vulnerability affects the function unlinkUser. Such manipulation leads to cross-site request forgery.

This vulnerability is referenced as CVE-2025-13737. It is possible to launch the attack remotely. No exploit is available.