What’s Vulnerable › Products
roxnor Wp Social Login and Register Social Counter vulnerabilities
7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Check whether your roxnor Wp Social Login and Register Social Counter version is affected
Latest roxnor Wp Social Login and Register Social Counter vulnerabilities
- CVE-2026-103898 — Wp Social Login and Register Social Counter <= 3.2.2 - Unauthenticated Authentication Bypass via Insufficient Email Verification in Social Login Callback (CVSS 8.1)
- CVE-2026-97344 — Wp Social Login and Register Social Counter <= 3.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write (CVSS 6.4)
- CVE-2025-13620 — Wp Social Login and Register Social Counter <= 3.1.3 - Missing Authorization in Cache REST Endpoints to Social Counter Tampering (CVSS 5.3)
- CVE-2025-1506 — Wp Social Login and Register Social Counter <= 3.1.0 - Cross-Site Request Forgery to Settings Update (CVSS 4.3)
- CVE-2024-9501 — Wp Social Login and Register Social Counter <= 3.0.7 - Authentication Bypass via WordPress.com OAuth provider (CVSS 9.8)
- CVE-2024-1763 — Wp Social Login and Register Social Counter <= 3.0.0 - Missing Authorization to Unauthenticated Social Login/Share Status Update (CVSS 5.3)
- CVE-2022-47160 — WordPress Wp Social Plugin <= 1.9.0 is vulnerable to Sensitive Data Exposure (CVSS 6.5)