WWPWeb

Products

Exploited and recent CVEs

• CVE-2026-8457 Critical 9.8 WooCommerce - Social Login <= 2.8.7 - Unauthenticated Authentication Bypass via Forged Apple 'id_token' JWT 0.7%
• CVE-2025-68547 High 7.5 WordPress Follow My Blog Post plugin <= 2.4.0 - Arbitrary Content Deletion vulnerability 0.3%
• CVE-2025-64258 High 7.5 WordPress Follow My Blog Post plugin <= 2.3.9 - Sensitive Data Exposure vulnerability 0.4%
• CVE-2025-39472 Medium 4.3 WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
• CVE-2024-56265 High 7.1 WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-54383 Critical 9.8 WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerability 1.2%
• CVE-2024-10114 High 8.1 Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth provider 0.5%
• CVE-2024-49272 Medium 4.3 WordPress Social Auto Poster plugin <= 5.3.15 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
• CVE-2024-47369 High 7.1 WordPress Social Auto Poster plugin <= 5.3.15 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-43131 High 7.5 WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated Arbitrary Post/Page Deletion vulnerability 0.5%
• CVE-2024-39651 High 8.6 WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Arbitrary File Deletion vulnerability 0.5%
• CVE-2024-7503 Critical 9.8 WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover 0.6%
• CVE-2024-6755 Medium 6.5 Social Auto Poster <= 5.3.14 - Missing Authorization to Unauthenticated Arbitrary Post Deletion 0.3%
• CVE-2024-6751 Medium 6.3 Social Auto Poster <= 5.3.14 - Cross-Site Request Forgery via Multiple Functions 0.2%
• CVE-2024-7027 High 7.3 WooCommerce - PDF Vouchers <= 4.9.3 - Authentication Bypass to Voucher Vendor 0.4%
• CVE-2024-6754 Medium 5.4 Social Auto Poster <= 5.3.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update via wpw_auto_poster_update_tweet_template 0.3%
• CVE-2024-6753 High 7.2 Social Auto Poster <= 5.3.14 - Unauthenticated Stored Cross-Site Scripting 0.8%
• CVE-2024-6752 Medium 6.4 Social Auto Poster <= 5.3.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting 0.3%
• CVE-2024-6750 High 7.3 Social Auto Poster <= 5.3.14 - Missing Authorization via Multiple Functions 0.3%
• CVE-2024-6756 High 8.8 Social Auto Poster <= 5.3.14 - Authenticated (Contributor+) Arbitrary File Upload 0.8%
• CVE-2024-6636 Critical 9.8 WooCommerce - Social Login <= 2.7.3 - Missing Authorization to Unauthenticated Privilege Escalation 0.5%
• CVE-2024-6635 High 7.3 WooCommerce - Social Login <= 2.7.3 - Unauthenticated Authentication Bypass 0.4%
• CVE-2024-6637 High 7.3 WooCommerce - Social Login <= 2.7.3 - Unauthenticated Privilege Escalation via One-Time Password 0.4%
• CVE-2024-37502 Medium 5.4 WordPress Social Login plugin <= 2.6.3 - PHP Object Injection vulnerability 0.3%
• CVE-2024-5871 Critical 9.8 WooCommerce - Social Login <= 2.6.2 - Unauthenticated PHP Object Injection 0.7%
• CVE-2024-5868 Medium 6.5 WooCommerce - Social Login <= 2.6.2 - Email Verification due to Insufficient Randomness 0.3%