How many WPWeb woocommerce social login CVEs are in CISA KEV?

None of WPWeb woocommerce social login's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of WPWeb woocommerce social login are affected?

24 distinct WPWeb woocommerce social login versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in WPWeb woocommerce social login CVEs?

WPWeb woocommerce social login's CVEs most often map to these CWE weakness types: CWE-502 (Deserialization of Untrusted Data), CWE-288 (Authentication Bypass Using an Alternate Path or Channel), CWE-287 (Improper Authentication), CWE-352 (Cross-Site Request Forgery (CSRF)).

How many critical WPWeb woocommerce social login vulnerabilities are there?

WPWeb woocommerce social login has 3 critical and 5 high-severity CVEs.

What is the average severity of WPWeb woocommerce social login CVEs?

The average CVSS base score across WPWeb woocommerce social login's scored CVEs is 8.3.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

WPWeb

9 CVEs

WPWeb woocommerce social login Vulnerabilities

Name: WPWeb woocommerce social login vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for woocommerce social login by WPWeb.

9

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.3

Avg CVSS

2024–2025

Last updated April 16, 2025

Overview

WPWeb woocommerce social login has 9 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting WPWeb woocommerce social login, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of WPWeb woocommerce social login's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High5

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of WPWeb woocommerce social login's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No WPWeb woocommerce social login CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every WPWeb woocommerce social login version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 2.7.44 CVEs
< 2.6.32 CVEs
<= 2.7.32 CVEs
< 2.7.01 CVE
< 2.7.81 CVE
< 2.8.31 CVE
<= 2.6.21 CVE
<= 2.6.31 CVE
<= 2.7.51 CVE
<= 2.7.71 CVE
<= 2.8.31 CVE
>= 2.7.01 CVE
>= 2.8.31 CVE

Fixed in

2.7.44 CVEs
> 2.7.32 CVEs
2.6.32 CVEs
> 2.6.21 CVE
> 2.6.31 CVE
> 2.7.51 CVE
> 2.7.71 CVE
> 2.8.31 CVE
2.7.01 CVE
2.7.81 CVE
2.8.31 CVE

Find a version

9 CVEs

Sort

WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-39472
Patch
CWE-352
High · CVSS 8.8
EPSS 0.2% (6th pct)2025-04-16
Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth provider
CVE-2024-10114
Patch
CWE-287
High · CVSS 8.1
EPSS 0.5% (41th pct)2024-11-05
WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover
CVE-2024-7503
Patch
CWE-288
Critical · CVSS 9.8
EPSS 0.6% (46th pct)2024-08-10
WooCommerce - Social Login <= 2.7.3 - Missing Authorization to Unauthenticated Privilege Escalation
CVE-2024-6636
Patch
CWE-862
Critical · CVSS 9.8
EPSS 0.5% (41th pct)2024-07-20
WooCommerce - Social Login <= 2.7.3 - Unauthenticated Authentication Bypass
CVE-2024-6635
Patch
CWE-288
High · CVSS 7.3
EPSS 0.4% (33th pct)2024-07-20
WooCommerce - Social Login <= 2.7.3 - Unauthenticated Privilege Escalation via One-Time Password
CVE-2024-6637
Patch
CWE-305
High · CVSS 7.3
EPSS 0.4% (29th pct)2024-07-20
WordPress Social Login plugin <= 2.6.3 - PHP Object Injection vulnerability
CVE-2024-37502
Patch
CWE-502
High · CVSS 7.5
EPSS 0.3% (24th pct)2024-07-09
WooCommerce - Social Login <= 2.6.2 - Unauthenticated PHP Object Injection
CVE-2024-5871
Patch
CWE-502
Critical · CVSS 9.8
EPSS 0.7% (49th pct)2024-06-15
WooCommerce - Social Login <= 2.6.2 - Email Verification due to Insufficient Randomness
CVE-2024-5868
Patch
CWE-330
Medium · CVSS 6.5
EPSS 0.3% (24th pct)2024-06-15

Common weakness types

The CWE weakness categories most often found in WPWeb woocommerce social login CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many WPWeb woocommerce social login CVEs were published each year.

2024

8

2025

1

Other WPWeb products

Browse vulnerabilities for other products by WPWeb.

Social Auto Poster9 CVEs WooCommerce - Social Login7 CVEs WooCommerce PDF Vouchers6 CVEs docket2 CVEs Docket (WooCommerce Collections / Wishlist / Watchlist)2 CVEs Follow My Blog Post2 CVEs WooCommerce - PDF Vouchers1 CVEs

All WPWeb vulnerabilities

Frequently asked questions

Common questions about WPWeb woocommerce social login vulnerabilities.

How many CVEs does WPWeb woocommerce social login have?: WPWeb woocommerce social login has 9 published CVE records since 2024.
How many WPWeb woocommerce social login CVEs are in CISA KEV?: None of WPWeb woocommerce social login's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for WPWeb woocommerce social login vulnerabilities?: No WPWeb woocommerce social login CVEs currently have a tracked public exploit in this dataset.
Which versions of WPWeb woocommerce social login are affected?: 24 distinct WPWeb woocommerce social login versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in WPWeb woocommerce social login CVEs?: WPWeb woocommerce social login's CVEs most often map to these CWE weakness types: CWE-502 (Deserialization of Untrusted Data), CWE-288 (Authentication Bypass Using an Alternate Path or Channel), CWE-287 (Improper Authentication), CWE-352 (Cross-Site Request Forgery (CSRF)).
How many critical WPWeb woocommerce social login vulnerabilities are there?: WPWeb woocommerce social login has 3 critical and 5 high-severity CVEs.
What is the average severity of WPWeb woocommerce social login CVEs?: The average CVSS base score across WPWeb woocommerce social login's scored CVEs is 8.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track WPWeb woocommerce social login vulnerabilities

Monitor new WPWeb woocommerce social login vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing