CVE-2026-103898

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.2.2. This is due to the social login REST callback registered at /wp-json/wslu-social-login/type/provider/ with permissioncallback = returntrue...

CVE-2026-103898 Wp Social Login and Register Social Counter <= 3.2.2 - Unauthenticated Authentication Bypass via Insufficient Email Verification in Social Login Callback

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.2.2. This is due to the social login REST callback registered at /wp-json/wslu-social-login/type/provider/ with permissioncallback = returntrue...

CVE-2026-103898

The Wp Social Login and Register Social Counter plugin for WordPress (versions up to and including 3.2.2 ) is vulnerable to an Authentication Bypass . The root cause is a social login REST callback at /wp-json/wslu-social-login/type/{provider}/ that uses permission_callback =&gt; __return_true. T...

EUVD-2026-114656

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.2.2. This is due to the social login REST callback registered at /wp-json/wslu-social-login/type/provider/ with permissioncallback = returntrue...

CVE-2026-103898: roxnor Wp Social Login and Register Social Counter: The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Authentication Bypass in all…

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 3.2.2. This is due to the social login REST callback registered at /wp-json/wslu-social-login/type/provider/ with permissioncallback = returntrue...

PT-2026-134467

Name of the Vulnerable Software and Affected Versions Wp Social Login and Register Social Counter versions prior to 3.2.3 Description An authentication bypass exists due to the social login REST callback registered at the endpoint /wp-json/wslu-social-login/type/provider/ using permission callbac...

WordPress Wp Social Login and Register Social Counter plugin <= 3.2.2 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by Kumar Atul Mandarin21 in WordPress Plugin Wp Social versions = 3.2.2...

CVE-2026-114705

Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Feed Gallery: from n/a through 5.0.13...

CVE-2026-114705

The WP Social Feed Gallery WordPress plugin (versions through 5.0.13 ) is susceptible to a Broken Access Control vulnerability (CWE-862). The issue stems from Missing Authorization , allowing for the exploitation of incorrectly configured access control security levels. This vulnerability can lea...

CVE-2026-114705 WordPress WP Social Feed Gallery plugin <= 5.0.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Feed Gallery: from n/a through 5.0.13...

CVE-2026-114705 WordPress WP Social Feed Gallery plugin <= 5.0.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Feed Gallery: from n/a through 5.0.13...

EUVD-2026-109263

Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Feed Gallery: from n/a through 5.0.13...

PT-2026-122565

Name of the Vulnerable Software and Affected Versions WP Social Feed Gallery versions prior to 5.0.14 Description An issue in the insta-gallery component allows for the exploitation of incorrectly configured access control security levels due to missing authorization. Recommendations Update WP...

WordPress WP Social Feed Gallery plugin <= 5.0.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin WP Social Feed Gallery versions = 5.0.13...

VulnCheck KEV: CVE-2025-13880

The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets Google Reviews, YouTube Feed, Photo Feeds, and More plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the getAdvanceSettings and saveAdvanceSettings...

CVE-2026-97344

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

CVE-2026-97344

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.2.1 . The root cause is insufficient input sanitization and output escaping regarding the Avatar Alt Attribute via Arbitrary User Meta Writ...

EUVD-2026-91919

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

CVE-2026-97344 Wp Social Login and Register Social Counter <= 3.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible f...

CVE-2026-97344 Wp Social Login and Register Social Counter <= 3.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible f...