wpweb Vulnerabilities and Affected Products
Vulnerabilities associated with WooCommerce Social Login.
Products
Clear product- Social Auto Poster9 vulnerabilities
- WooCommerce - Social Login8 vulnerabilities
- woocommerce_social_login6 vulnerabilities
- social_auto_poster3 vulnerabilities
- WooCommerce PDF Vouchers3 vulnerabilities
- woocommerce_pdf_vouchers3 vulnerabilities
- Follow My Blog Post2 vulnerabilities
- WooCommerce Social Login2 vulnerabilities
- Docket (WooCommerce Collections / Wishlist / Watchlist)1 vulnerability
- WooCommerce - PDF Vouchers1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-39472MEDIUM | WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in wpweb WooCommerce Social Login woo-social-login allows Cross Site Request Forgery.This issue affects WooCommerce Social Login: from n/a through < 2.8.3. CWE-352Apr 16, 2025 | CVSS4.3v3.1 | EPSS0.165% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-37502MEDIUM | WordPress Social Login plugin <= 2.6.3 - PHP Object Injection vulnerabilityDeserialization of Untrusted Data vulnerability in wpweb WooCommerce Social Login woo-social-login.This issue affects WooCommerce Social Login: from n/a through <= 2.6.3. CWE-502Jul 9, 2024 | CVSS5.4v3.1 | EPSS0.313% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |