Wpweb vulnerabilities

Products

• Social Auto Poster 11
• Woocommerce - Social Login 8
• Woocommerce Social Login 6
• Woocommerce Pdf Vouchers 5
• Social Auto Poster 3
• Woocommerce Pdf Vouchers 3
• Follow My Blog Post 2
• Woocommerce Social Login 2

Newest

• wpweb woocommerce - social login WooCommerce - Social Login <= 2.8.7 - Unauthenticated Authentication Bypass via Forged Apple 'id_token' JWT CVE-2026-8457 9.8 CriticalAugust 1, 2026
• wpweb follow my blog post WordPress Follow My Blog Post plugin <= 2.4.0 - Arbitrary Content Deletion vulnerability CVE-2025-68547 7.5 HighJanuary 5, 2026
• wpweb follow my blog post WordPress Follow My Blog Post plugin <= 2.3.9 - Sensitive Data Exposure vulnerability CVE-2025-64258 7.5 HighDecember 18, 2025
• wpweb woocommerce social login WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-39472 4.3 MediumApril 16, 2025
• wpweb woocommerce pdf vouchers WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Cross Site Scripting (XSS) vulnerability CVE-2024-56265 7.1 HighDecember 31, 2024
• wpweb woocommerce pdf vouchers WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerability CVE-2024-54383 Public exploit 9.8 CriticalDecember 18, 2024
• wpweb woocommerce - social login, woocommerce social login +1 more Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth provider CVE-2024-10114 8.1 HighNovember 5, 2024
• wpweb woocommerce pdf vouchers WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Multiple Vulnerabilities CVE-2024-39650 7.3 HighNovember 1, 2024
• wpweb social auto poster WordPress Social Auto Poster plugin <= 5.3.15 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-49272 4.3 MediumOctober 20, 2024
• wpweb social auto poster WordPress Social Auto Poster plugin <= 5.3.15 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-47369 7.1 HighOctober 5, 2024
• wpweb docket (woocommerce collections / wishlist / watchlist), wpwebelite docket +1 more WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated Arbitrary Post/Page Deletion vulnerability CVE-2024-43131 7.5 HighAugust 13, 2024
• wpweb woocommerce pdf vouchers WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Arbitrary File Deletion vulnerability CVE-2024-39651 8.6 HighAugust 13, 2024
• wpweb woocommerce - social login, woocommerce social login +1 more WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover CVE-2024-7503 9.8 CriticalAugust 10, 2024
• wpweb woocommerce pdf vouchers WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-39652 7.1 HighAugust 1, 2024
• wpweb woocommerce - pdf vouchers, woocommerce pdf vouchers +1 more WooCommerce - PDF Vouchers <= 4.9.3 - Authentication Bypass to Voucher Vendor CVE-2024-7027 7.3 HighJuly 24, 2024
• wpweb social auto poster Social Auto Poster <= 5.3.14 - Missing Authorization to Unauthenticated Arbitrary Post Deletion CVE-2024-6755 6.5 MediumJuly 24, 2024
• wpweb social auto poster Social Auto Poster <= 5.3.14 - Cross-Site Request Forgery via Multiple Functions CVE-2024-6751 6.3 MediumJuly 24, 2024
• wpweb social auto poster Social Auto Poster <= 5.3.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update via wpw_auto_poster_update_tweet_template CVE-2024-6754 5.4 MediumJuly 24, 2024
• wpweb social auto poster Social Auto Poster <= 5.3.14 - Unauthenticated Stored Cross-Site Scripting CVE-2024-6753 7.2 HighJuly 24, 2024
• wpweb social auto poster Social Auto Poster <= 5.3.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-6752 6.4 MediumJuly 24, 2024
• wpweb social auto poster Social Auto Poster <= 5.3.14 - Missing Authorization via Multiple Functions CVE-2024-6750 7.3 HighJuly 24, 2024
• wpweb social auto poster Social Auto Poster <= 5.3.14 - Authenticated (Contributor+) Arbitrary File Upload CVE-2024-6756 8.8 HighJuly 24, 2024
• wpweb woocommerce - social login, woocommerce social login +1 more WooCommerce - Social Login <= 2.7.3 - Missing Authorization to Unauthenticated Privilege Escalation CVE-2024-6636 9.8 CriticalJuly 20, 2024
• wpweb woocommerce - social login, woocommerce social login +1 more WooCommerce - Social Login <= 2.7.3 - Unauthenticated Authentication Bypass CVE-2024-6635 7.3 HighJuly 20, 2024
• wpweb woocommerce - social login, wpwebelite woocommerce social login, yithemes yith woocommerce social login +2 more WooCommerce - Social Login <= 2.7.3 - Unauthenticated Privilege Escalation via One-Time Password CVE-2024-6637 7.3 HighJuly 20, 2024
• wpweb woocommerce social login WordPress Social Login plugin <= 2.6.3 - PHP Object Injection vulnerability CVE-2024-37502 5.4 MediumJuly 9, 2024
• wpweb woocommerce - social login, woocommerce social login +1 more WooCommerce - Social Login <= 2.6.2 - Unauthenticated PHP Object Injection CVE-2024-5871 9.8 CriticalJune 15, 2024
• wpweb woocommerce - social login, wpwebelite woocommerce social login +1 more WooCommerce - Social Login <= 2.6.2 - Email Verification due to Insufficient Randomness CVE-2024-5868 6.5 MediumJune 15, 2024
• accesspress themes social auto poster WordPress Social Auto Poster Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-26532 5.4 MediumNovember 22, 2023
• access-keys wp popup banners, accesspress themes accessbuddy, basic +141 more +143 more Backdoored Plugins & Themes from AccessPress Themes CVE-2021-24867 EPSS 18.0% 9.8 CriticalFebruary 21, 2022