Lucene search
+L

683 matches found

Kitploit
Kitploit
added 2026/09/23 7:13 a.m.10 views

CVE-2023-2982

CVE-2023-2982 WordPress Social Login and Register Discord, Google, Twitter, LinkedIn = 7.6.4 - Authentication Bypass Info The WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4...

9.8CVSS8.4AI score0.46242EPSS
SaveExploits4
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.95 views

Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login

The Registration Forms User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.7.6 has a flaw in the social login implementation, allowing unauthenticated attacker to login as any user on the site by only knowing their user ID or username...

8.1CVSS7.3AI score0.0983EPSS
SaveExploits3References3
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.128 views

Miniorange Social Login and Register <= 7.6.3 - Authentication Bypass

The WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4. This is due to insufficient encryption on the user being supplied during a login validated through the plugin. This makes...

9.8CVSS8.3AI score0.46242EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.74 views

Social Login by BestWebSoft < 0.2 - Cross-Site Scripting

The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues. id: CVE-2017-18501 info: name: Social Login by BestWebSoft 0.2 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues...

6.1CVSS6.3AI score0.0141EPSS
SaveExploits1References4
Kitploit
Kitploit
added 2026/09/22 6:01 p.m.11 views

CVE-2024-9106

CVE-2024-9106 Wechat Social login = 1.3.0 - Authentication Bypass Description: The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0. This is due to insufficient verification on the user being supplied during the social login...

9.8CVSS5.9AI score0.0171EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/21 8:46 a.m.12 views

CVE-2026-2991

KiviCare = 4.1.2 - Authentication Bypass CVE-2026-2991 PoC 📜 Description CVE-2026-2991 is an authentication bypass vulnerability in the KiviCare – Clinic & Patient Management System EHR WordPress plugin affecting all versions up to and including 4.1.2. The plugin exposes a public REST endpoint at...

7.3CVSS5.8AI score0.00434EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/20 1:43 p.m.11 views

zyxel-social-login-bypass-cve-2026-8508

CVE-2026-8508:Zyxel 强制门户绕过——通过受信浏览器提交的 Facebook 身份 本仓库收录了 CVE-2026-8508 的公开分析文章、快速验证脚本及部分精选支撑材料。 这是什么 CVE-2026-8508 是 Zyxel 强制门户社交登录中的一个预认证信任边界缺陷。此处的本地逆向工作基于 WAX650S V7.10ABRM.4C0:浏览器完成 Facebook 侧身份步骤后,将 fbuser 及相关字段提交至 /cgi-bin/sociallogin.cgi,后端在认证跳过路径上接受了这些字段。 Zyxel 于 2026-08-04...

6.5CVSS6.9AI score0.007EPSS
SaveExploits1
NVD
NVD
added 2026/09/19 7:16 a.m.8 views

CVE-2026-86814

The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing account, allowing unauthenticated attackers to log in as any user, including administrators, whose email address they can asse...

8.1CVSS0.00226EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/19 6:00 a.m.11 views

EUVD-2026-83506

The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing account, allowing unauthenticated attackers to log in as any user, including administrators, whose email address they can asse...

8.1CVSS5.7AI score0.00226EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/19 6:00 a.m.25 views

CVE-2026-86814

The UsersWP – Social Login WordPress plugin before 1.5.10 fails to verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing account. This allows unauthenticated attackers to log in as any user—including administrators—by asserting the ...

5.7AI score0.00226EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/19 6:00 a.m.43 views

CVE-2026-86814 UsersWP - Social Login < 1.5.10 - Unauthenticated Account Takeover via Unverified Provider Email

The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an email address before using it to resolve an existing account, allowing unauthenticated attackers to log in as any user, including administrators, whose email address they can asse...

0.00226EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 10:01 a.m.9 views

CVE-2023-2982-POC

CVE-2023-2982 WordPress Social Login and Register Discord, Google, Twitter, LinkedIn = 7.6.4 - Authentication Bypass WordPress社交登录和注册(Discord,Google,Twitter,LinkedIn)=7.6.4-绕过身份验证 Info The WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin for WordPress is vulnerable to...

9.8CVSS8.8AI score0.46242EPSS
SaveExploits4
NVD
NVD
added 2026/09/15 5:17 p.m.7 views

CVE-2026-89022

BookStack before 26.05.5 contains an authentication bypass vulnerability in its social login implementation that allows unauthenticated attackers to sign in as arbitrary users by authenticating through a different social provider sharing the same driverid namespace. Attackers can authenticate at...

9.1CVSS0.00288EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/15 4:11 p.m.9 views

EUVD-2026-78821

BookStack before 26.05.5 contains an authentication bypass vulnerability in its social login implementation that allows unauthenticated attackers to sign in as arbitrary users by authenticating through a different social provider sharing the same driverid namespace. Attackers can authenticate at...

9.1CVSS5.8AI score0.00288EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/15 4:11 p.m.18 views

CVE-2026-89022

BookStack before 26.05.5 is affected by an authentication bypass in its social login implementation. The root cause lies in SocialAuthService::handleLoginCallback , whose database query ignores the driver column when retrieving linked account records, allowing an unauthenticated attacker to authe...

9.1CVSS5.8AI score0.00288EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/31 9:17 p.m.15 views

CVE-2026-82229

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.2 versions...

7.1CVSS0.00146EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/31 8:30 p.m.18 views

EUVD-2026-68798

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.2 versions...

7.1CVSS5.9AI score0.00146EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/31 8:30 p.m.31 views

CVE-2026-82229

An unauthenticated Cross Site Scripting (XSS) vulnerability affects the WordPress Social Login and Register plugin in versions 7.8.2 and earlier . The flaw was discovered by Patchstack researcher Ananda Dhakal and carries a CVSS 3.1 score of 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L...

7.1CVSS5.9AI score0.00146EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/31 8:30 p.m.38 views

CVE-2026-82229 WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.2 versions...

7.1CVSS0.00146EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/08/28 2:23 p.m.12 views

WordPress WordPress Social Login and Register plugin <= 7.8.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WordPress Social Login and Register versions = 7.8.2...

7.1CVSS5.9AI score0.00146EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder