Wpweb - vulnerabilities (CVEs)
27 CVEs in 7 products, 0 in the last 30 days, newest from 2026-08-01.
Products
- Social Auto Poster - 9 CVEs
- Woocommerce - Social Login - 8 CVEs
- Woocommerce Social Login - 6 CVEs
- Woocommerce Pdf Vouchers - 3 CVEs
- Follow My Blog Post - 2 CVEs
- Docket Woocommerce Collections Wishlist Watchlist - 1 CVEs
- Woocommerce - Pdf Vouchers - 1 CVEs
Newest CVEs of Wpweb
- CVE-2026-8457 - CVSS 9.8 (critical), 2026-08-01: The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to and including 2.8.7. This is due to the…
- CVE-2025-68547 - CVSS 7.5 (high), 2026-01-05: Missing Authorization vulnerability in wpweb Follow My Blog Post follow-my-blog-post allows Exploiting Incorrectly Configured Access Control Security…
- CVE-2025-64258 - CVSS 7.5 (high), 2025-12-18: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in wpweb Follow My Blog Post follow-my-blog-post allows Retrieve…
- CVE-2025-39472 - CVSS 8.8 (high), 2025-04-16: Cross-Site Request Forgery (CSRF) vulnerability in wpweb WooCommerce Social Login woo-social-login allows Cross Site Request Forgery.This issue affects…
- CVE-2024-56265 - CVSS 7.1 (high), 2024-12-31: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers…
- CVE-2024-54383 - CVSS 9.8 (critical), 2024-12-18: Incorrect Privilege Assignment vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Privilege Escalation.This issue affects…
- CVE-2024-10114 - CVSS 8.1 (high), 2024-11-05: The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.7.7. This is due to…
- CVE-2024-39650 - CVSS 9.8 (critical), 2024-11-01: Missing Authorization vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects…
- CVE-2024-49272 - CVSS 8.8 (high), 2024-10-20: Cross-Site Request Forgery (CSRF) vulnerability in wpweb Social Auto Poster social-auto-poster allows Cross Site Request Forgery.This issue affects Social…
- CVE-2024-47369 - CVSS 7.1 (high), 2024-10-05: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpweb Social Auto Poster social-auto-poster allows…
- CVE-2024-43131 - CVSS 7.5 (high), 2024-08-13: Incorrect Authorization vulnerability in WPWeb Docket (WooCommerce Collections / Wishlist / Watchlist) allows Accessing Functionality Not Properly Constrained…
- CVE-2024-39651 - CVSS 9.3 (critical), 2024-08-13: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPWeb WooCommerce PDF Vouchers allows File Manipulation.This…
- CVE-2024-7503 - CVSS 9.8 (critical), 2024-08-12: The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.5. This is due to the use of…
- CVE-2024-7027 - CVSS 7.3 (high), 2024-07-24: The WooCommerce - PDF Vouchers plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 4.9.3. This is due to…
- CVE-2024-6753 - CVSS 7.2 (high), 2024-07-24: The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mapTypes’ parameter in the…
- CVE-2024-6756 - CVSS 8.8 (high), 2024-07-24: The Social Auto Poster plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the…
- CVE-2024-6752 - CVSS 6.4 (medium), 2024-07-24: The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wp_name’ parameter in the…
- CVE-2024-6755 - CVSS 6.5 (medium), 2024-07-24: The Social Auto Poster plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the…
- CVE-2024-6754 - CVSS 5.4 (medium), 2024-07-24: The Social Auto Poster plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability check on the…
- CVE-2024-6750 - CVSS 7.5 (high), 2024-07-24: The Social Auto Poster plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple…
- CVE-2024-6751 - CVSS 6.5 (medium), 2024-07-24: The Social Auto Poster plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.3.14. This is due to missing or…
- CVE-2024-6636 - CVSS 9.8 (critical), 2024-07-20: The WooCommerce - Social Login plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…
- CVE-2024-6635 - CVSS 7.3 (high), 2024-07-20: The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.3. This is due to…
- CVE-2024-6637 - CVSS 7.3 (high), 2024-07-20: The WooCommerce - Social Login plugin for WordPress is vulnerable to unauthenticated privilege escalation in all versions up to, and including, 2.7.3. This is…
- CVE-2024-37502 - CVSS 7.5 (high), 2024-07-09: Deserialization of Untrusted Data vulnerability in wpweb WooCommerce Social Login woo-social-login.This issue affects WooCommerce Social Login: from n/a…
- CVE-2024-5868 - CVSS 6.5 (medium), 2024-06-15: The WooCommerce - Social Login plugin for WordPress is vulnerable to Email Verification in all versions up to, and including, 2.6.2 via the use of…
- CVE-2024-5871 - CVSS 9.8 (critical), 2024-06-15: The WooCommerce - Social Login plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.6.2 via deserialization of…
