WPWeb WooCommerce - Social Login

• CVE-2026-8457 Critical 9.8 WooCommerce - Social Login <= 2.8.7 - Unauthenticated Authentication Bypass via Forged Apple 'id_token' JWT 0.7%
• CVE-2025-39472 Medium 4.3 WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
• CVE-2024-10114 High 8.1 Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth provider 0.5%
• CVE-2024-7503 Critical 9.8 WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover 0.6%
• CVE-2024-6636 Critical 9.8 WooCommerce - Social Login <= 2.7.3 - Missing Authorization to Unauthenticated Privilege Escalation 0.5%
• CVE-2024-6635 High 7.3 WooCommerce - Social Login <= 2.7.3 - Unauthenticated Authentication Bypass 0.4%
• CVE-2024-6637 High 7.3 WooCommerce - Social Login <= 2.7.3 - Unauthenticated Privilege Escalation via One-Time Password 0.4%
• CVE-2024-37502 Medium 5.4 WordPress Social Login plugin <= 2.6.3 - PHP Object Injection vulnerability 0.3%
• CVE-2024-5871 Critical 9.8 WooCommerce - Social Login <= 2.6.2 - Unauthenticated PHP Object Injection 0.7%
• CVE-2024-5868 Medium 6.5 WooCommerce - Social Login <= 2.6.2 - Email Verification due to Insufficient Randomness 0.3%