Software intelligence
Important: Woo Social Login appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works
Tracked advisories
10
Latest advisory
1 August 2026
CISA KEV matches
0
In this WordPress feed
WordPress slug
woo-social-login
Plugin
This catalog lists 10 known advisories affecting Woo Social Login. The most recent was published on 1 August 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.
WooCommerce - Social Login <= 2.8.7 - Unauthenticated Authentication Bypass via Forged Apple 'id_token' JWT
May allow access to accounts or admin areas without valid credentials.
Published 1 August 2026
WooCommerce Social Login <= 2.8.2 - Cross-Site Request Forgery
May trick authenticated users into performing unintended actions.
Published 16 April 2025
Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth provider
May allow access to accounts or admin areas without valid credentials.
Published 4 November 2024
Known Woo Social Login advisories published by month.
CVE-2026-8457 · Published 1 August 2026
Affected versions: ≤ 2.8.7
CVE-2025-39472 · Published 16 April 2025
Affected versions: ≤ 2.8.2
CVE-2024-10114 · Published 4 November 2024
Affected versions: ≤ 2.7.7
CVE-2024-7503 · Published 9 August 2024
Affected versions: ≤ 2.7.5
CVE-2024-6636 · Published 19 July 2024
Affected versions: ≤ 2.7.3
CVE-2024-6635 · Published 19 July 2024
Affected versions: ≤ 2.7.3
CVE-2024-6637 · Published 19 July 2024
Affected versions: ≤ 2.7.3
CVE-2024-37502 · Published 5 July 2024
Affected versions: ≤ 2.6.3
CVE-2024-5871 · Published 14 June 2024
Affected versions: ≤ 2.6.2
CVE-2024-5868 · Published 14 June 2024
Affected versions: ≤ 2.6.2
SiteRespond Defence matches your installed Woo Social Login version against this catalog when the Defence plugin is connected to your WordPress site.