Roxnor Wp Social Login and Register Social Counter
CVE-2026-103898High 8.1Wp Social Login and Register Social Counter <= 3.2.2 - Unauthenticated Authentication Bypass via Insufficient Email Verification in Social Login Callback0.4%
CVE-2026-97344Medium 6.4Wp Social Login and Register Social Counter <= 3.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write0.2%
CVE-2025-13620Medium 5.3Wp Social Login and Register Social Counter <= 3.1.3 - Missing Authorization in Cache REST Endpoints to Social Counter Tampering0.4%
CVE-2025-1506Medium 4.3Wp Social Login and Register Social Counter <= 3.1.0 - Cross-Site Request Forgery to Settings Update0.2%
CVE-2024-9501Critical 9.8Wp Social Login and Register Social Counter <= 3.0.7 - Authentication Bypass via WordPress.com OAuth provider0.8%
CVE-2024-1763Medium 6.5Wp Social Login and Register Social Counter <= 3.0.0 - Missing Authorization to Unauthenticated Social Login/Share Status Update0.4%