What’s Vulnerable › Products

WPWeb WooCommerce - Social Login vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your WPWeb WooCommerce - Social Login version is affected

Latest WPWeb WooCommerce - Social Login vulnerabilities

• CVE-2026-8457 — WooCommerce - Social Login <= 2.8.7 - Unauthenticated Authentication Bypass via Forged Apple 'id_token' JWT (CVSS 9.8)
• CVE-2025-39472 — WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8)
• CVE-2024-10114 — Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth provider (CVSS 8.1)
• CVE-2024-7503 — WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover (CVSS 9.8)
• CVE-2024-6637 — WooCommerce - Social Login <= 2.7.3 - Unauthenticated Privilege Escalation via One-Time Password (CVSS 7.3)
• CVE-2024-6636 — WooCommerce - Social Login <= 2.7.3 - Missing Authorization to Unauthenticated Privilege Escalation (CVSS 9.8)
• CVE-2024-6635 — WooCommerce - Social Login <= 2.7.3 - Unauthenticated Authentication Bypass (CVSS 7.3)
• CVE-2024-37502 — WordPress Social Login plugin <= 2.6.3 - PHP Object Injection vulnerability (CVSS 7.5)
• CVE-2024-5871 — WooCommerce - Social Login <= 2.6.2 - Unauthenticated PHP Object Injection (CVSS 9.8)
• CVE-2024-5868 — WooCommerce - Social Login <= 2.6.2 - Email Verification due to Insufficient Randomness (CVSS 5.3)