Wp Social Login and Register Social Counter vulnerabilities

2 known vulnerabilities in Wp Social Login and Register Social Counter from Roxnor. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Wp Social Login and Register Social Counter: Improper Authentication

  CVE-2026-103898Oct 31, 2026Roxnor

  The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.2.2. This is due to the social login REST callback registered at `/wp-json/wslu-social-login/type/{provider}/` w

• 9.8 Critical severity

  Wp Social Login and Register Social Counter: Authentication Bypass Using an Alternate Path or Channel

  CVE-2024-9501Oct 26, 2024Roxnor

  The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.0.7. This is due to insufficient verification on the user being returned by the social login token. This makes i