Skip to content
OpenAdvisories

Product · WPWeb

WooCommerce - Social Login

10 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 4.3

    WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in wpweb WooCommerce Social Login woo-social-login allows Cross Site Request Forgery.This issue affects WooCommerce Social Login: from n/a through < 2.8.3.

  • Medium 5.4

    WordPress Social Login plugin <= 2.6.3 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in wpweb WooCommerce Social Login woo-social-login.This issue affects WooCommerce Social Login: from n/a through <= 2.6.3.

  • Medium 6.5

    WooCommerce - Social Login <= 2.6.2 - Email Verification due to Insufficient Randomness

    The WooCommerce - Social Login plugin for WordPress is vulnerable to Email Verification in all versions up to, and including, 2.6.2 via the use of insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email …