Skip to content
OpenAdvisories

Vendor

WPWeb

26 known vulnerabilities.

Products

WooCommerce - Social Login 10 Social Auto Poster 9 WooCommerce PDF Vouchers 4 Follow My Blog Post 2 Docket (WooCommerce Collections / Wishlist / Watchlist) 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-39472

    WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in wpweb WooCommerce Social Login woo-social-login allows Cross Site Request Forgery.This issue affects WooCommerce Social Login: from n/a through < 2.8.3.

    WPWeb WooCommerce - Social Login Web / CMS
  • Medium 4.3
    CVE-2024-49272

    WordPress Social Auto Poster plugin <= 5.3.15 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in wpweb Social Auto Poster social-auto-poster allows Cross Site Request Forgery.This issue affects Social Auto Poster: from n/a through <= 5.3.15.

    WPWeb Social Auto Poster
  • Medium 6.5
    CVE-2024-6755

    Social Auto Poster <= 5.3.14 - Missing Authorization to Unauthenticated Arbitrary Post Deletion

    The Social Auto Poster plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the ‘wpw_auto_poster_quick_delete_multiple’ function in all versions up to, and including, 5.3.14. This makes it possi…

    WPWeb Social Auto Poster Web / CMS
  • Medium 6.3
    CVE-2024-6751

    Social Auto Poster <= 5.3.14 - Cross-Site Request Forgery via Multiple Functions

    The Social Auto Poster plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.3.14. This is due to missing or incorrect nonce validation on multiple functions. This makes it possible for unauthenticated attackers …

    WPWeb Social Auto Poster Web / CMS
  • Medium 5.4
    CVE-2024-6754

    Social Auto Poster <= 5.3.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update via wpw_auto_poster_update_tweet_template

    The Social Auto Poster plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability check on the ‘wpw_auto_poster_update_tweet_template’ function in all versions up to, and including, 5.3.14. This makes it possible for authe…

    WPWeb Social Auto Poster Web / CMS
  • Medium 6.4
    CVE-2024-6752

    Social Auto Poster <= 5.3.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting

    The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wp_name’ parameter in the 'wpw_auto_poster_map_wordpress_post_type' AJAX function in all versions up to, and including, 5.3.14 due to insufficient input sanitiza…

    WPWeb Social Auto Poster Web / CMS
  • Medium 5.4
    CVE-2024-37502

    WordPress Social Login plugin <= 2.6.3 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in wpweb WooCommerce Social Login woo-social-login.This issue affects WooCommerce Social Login: from n/a through <= 2.6.3.

    WPWeb WooCommerce - Social Login Web / CMS
  • Medium 6.5
    CVE-2024-5868

    WooCommerce - Social Login <= 2.6.2 - Email Verification due to Insufficient Randomness

    The WooCommerce - Social Login plugin for WordPress is vulnerable to Email Verification in all versions up to, and including, 2.6.2 via the use of insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email …

    WPWeb WooCommerce - Social Login Web / CMS