Plugin icon

Wp Social Login and Register Social Counter

wp-social

Vulnerabilities:

5

Last Updated:

September 30, 2026

Active Installs:

80000

Published
Title
Fixed in
CVSS
Published
2026-10-02
Title
Wp Social Login and Register Social Counter < 3.2.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write
Fixed in
Fixed in 3.2.2
CVSS
6.4 (medium)
Published
2025-12-04
Title
Wp Social Login and Register Social Counter < 3.1.4 - Missing Authorization in Cache REST Endpoints to Social Counter Tampering
Fixed in
Fixed in 3.1.4
CVSS
5.3 (medium)
Published
2025-02-27
Title
Wp Social Login and Register Social Counter < 3.1.1 - Cross-Site Request Forgery to Settings Update
Fixed in
Fixed in 3.1.1
CVSS
4.3 (medium)
Published
2024-10-25
Title
Wp Social Login and Register Social Counter < 3.0.8 - Authentication Bypass
Fixed in
Fixed in 3.0.8
CVSS
9.8 (critical)
Published
2024-02-29
Title
Wp Social Login and Register Social Counter < 3.0.1 - Missing Authorization to Unauthenticated Social Login/Share Status Update
Fixed in
Fixed in 3.0.1
CVSS
6.5 (medium)