Woocommerce Social Login Security Vulnerabilities and Issues — Woocommerce Social Login CVE List

Lucene search

WpwebeliteWoocommerce Social Login

2 matches found

CVE•added 2024/06/15 4:15 a.m.•52 views

CVE-2024-5871

The WooCommerce - Social Login plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.6.2 via deserialization of untrusted input from the 'woo_slg_verify' vulnerable parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. N...

9.8CVSS9.7AI score0.03895EPSS

CVE•added 2024/06/15 4:15 a.m.•44 views

CVE-2024-5868

The WooCommerce - Social Login plugin for WordPress is vulnerable to Email Verification in all versions up to, and including, 2.6.2 via the use of insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email verification.

6.5CVSS6.7AI score0.00132EPSS