Lucene search
+L

676 matches found

NVD
NVD
added 2026/09/15 5:17 p.m.2 views

CVE-2026-89022

BookStack before 26.05.5 contains an authentication bypass vulnerability in its social login implementation that allows unauthenticated attackers to sign in as arbitrary users by authenticating through a different social provider sharing the same driverid namespace. Attackers can authenticate at...

9.1CVSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/15 4:11 p.m.4 views

EUVD-2026-78821

BookStack before 26.05.5 contains an authentication bypass vulnerability in its social login implementation that allows unauthenticated attackers to sign in as arbitrary users by authenticating through a different social provider sharing the same driverid namespace. Attackers can authenticate at...

9.1CVSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.93 views

Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login

The Registration Forms User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.7.6 has a flaw in the social login implementation, allowing unauthenticated attacker to login as any user on the site by only knowing their user ID or username...

8.1CVSS7.1AI score0.0983EPSS
SaveExploits3References3
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.73 views

Social Login by BestWebSoft < 0.2 - Cross-Site Scripting

The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues. id: CVE-2017-18501 info: name: Social Login by BestWebSoft 0.2 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues...

6.1CVSS6.2AI score0.0141EPSS
SaveExploits1References4
Kitploit
Kitploit
added 2026/09/14 8:58 p.m.7 views

CVE-2024-9106

CVE-2024-9106 Wechat Social login 플러그인 = 1.3.0 - 인증 우회 설명: WordPress용 Wechat Social login 플러그인은 버전 1.3.0까지 인증 우회에 취약합니다. 이는 소셜 로그인 중 제공되는 사용자 검증이 불충분하기 때문입니다. 이를 통해 인증되지 않은 공격자가 사용자 ID에 접근할 수 있는 경우 사이트의 기존 사용자예: 관리자로 로그인할 수 있습니다. 이는 앱 시크릿이 설정되지 않은 경우에만 악용 가능하며, 기본값은 빈 값입니다. uid=1을 추가하거나 로그인하려는 계정...

9.8CVSS6AI score0.0171EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 5:41 p.m.8 views

CVE-2023-2982

CVE-2023-2982 WordPress Social Login and Register Discord, Google, Twitter, LinkedIn = 7.6.4 – 인증 우회 정보 WordPress용 Social Login and Register Discord, Google, Twitter, LinkedIn 플러그인은 7.6.4 버전까지 인증 우회에 취약합니다. 이는 플러그인을 통해 검증된 로그인 과정에서 사용자가 제공한 정보의 암호화가 충분하지 않기 때문입니다. 이로 인해 인증되지 않은 공격자가 사이트의 기존 사용자예:...

9.8CVSS8.4AI score0.46242EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/14 8:46 a.m.8 views

CVE-2026-2991

KiviCare = 4.1.2 - 認証バイパス(CVE-2026-2991)PoC 📜 説明 CVE-2026-2991 は、KiviCare – Clinic & Patient Management System(EHR) WordPressプラグインの認証バイパス脆弱性であり、4.1.2 までのすべてのバージョンに影響します。 このプラグインは、ソーシャルログインでユーザーを認証する公開RESTエンドポイント /wp-json/kivicare/v1/auth/patient/social-login を公開しています。patientSocialLogin...

7.3CVSS6AI score0.00434EPSS
SaveExploits3References1
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.128 views

Miniorange Social Login and Register <= 7.6.3 - Authentication Bypass

The WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4. This is due to insufficient encryption on the user being supplied during a login validated through the plugin. This makes...

9.8CVSS8.1AI score0.46242EPSS
SaveExploits4References5
Kitploit
Kitploit
added 2026/09/13 1:43 p.m.6 views

zyxel-social-login-bypass-cve-2026-8508

CVE-2026-8508: Bypass del portal cautivo de Zyxel mediante identidad de Facebook enviada por un navegador de confianza Este repositorio empaqueta el informe público, el script de verificación rápida y artefactos de soporte seleccionados para CVE-2026-8508. Qué es esto CVE-2026-8508 es una falla d...

6.5CVSS6.7AI score0.007EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 10:00 a.m.6 views

CVE-2023-2982-POC

CVE-2023-2982 WordPress 소셜 로그인 및 등록 Discord, Google, Twitter, LinkedIn = 7.6.4 - 인증 우회 WordPress社交登录和注册(Discord,Google,Twitter,LinkedIn)=7.6.4-绕过身份验证 정보 The WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin for WordPress is vulnerable to authentication bypass in versio...

9.8CVSS8.4AI score0.46242EPSS
SaveExploits4
NVD
NVD
added 2026/08/31 9:17 p.m.13 views

CVE-2026-82229

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.2 versions...

7.1CVSS0.00146EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/31 8:30 p.m.34 views

CVE-2026-82229 WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.2 versions...

7.1CVSS0.00146EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/31 8:30 p.m.14 views

EUVD-2026-68798

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.2 versions...

7.1CVSS5.9AI score0.00146EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/31 8:30 p.m.26 views

CVE-2026-82229

An unauthenticated Cross Site Scripting (XSS) vulnerability affects the WordPress Social Login and Register plugin in versions 7.8.2 and earlier . The flaw was discovered by Patchstack researcher Ananda Dhakal and carries a CVSS 3.1 score of 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L...

7.1CVSS5.9AI score0.00146EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/08/28 2:23 p.m.9 views

WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WordPress Social Login and Register versions = 7.8.2...

7.1CVSS5.9AI score0.00146EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2026/08/22 6:00 a.m.37 views

CVE-2026-77001 Social Login & Sharing buttons with Analytics By SoClever <= 1.2.0 - Unauthenticated Authentication Bypass

The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated attackers to obtain a valid session as any existing user,...

0.00417EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/22 6:00 a.m.18 views

EUVD-2026-64226

The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated attackers to obtain a valid session as any existing user,...

5.5AI score0.00417EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/18 3:17 p.m.9 views

CVE-2026-73351

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...

7.1CVSS0.0018EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/18 2:00 p.m.10 views

EUVD-2026-60778

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...

7.1CVSS5AI score0.0018EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/18 2:00 p.m.23 views

CVE-2026-73351 WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...

7.1CVSS0.0018EPSS
SaveExploits0References1
Rows per page
Query Builder