WPWeb vulnerabilities

CVEs per yearBy the year they were published

1. 202422
2. 20252
3. 20262

Newest CVEs

• CVE-2026-8457

  WooCommerce - Social Login <= 2.8.7 - Unauthenticated Authentication Bypass via Forged Apple 'id_token' JWT

  WPWeb · WooCommerce - Social Login

  Critical9.8
• CVE-2025-68547

  WordPress Follow My Blog Post plugin <= 2.4.0 - Arbitrary Content Deletion vulnerability

  wpweb · Follow My Blog Post

  High7.5
• CVE-2025-64258

  WordPress Follow My Blog Post plugin <= 2.3.9 - Sensitive Data Exposure vulnerability

  wpweb · Follow My Blog Post

  High7.5
• CVE-2025-39472

  WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerability

  wpweb · WooCommerce Social Login

  Medium4.3
• CVE-2024-56265

  WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Cross Site Scripting (XSS) vulnerability

  wpweb · WooCommerce PDF Vouchers

  High7.1
• CVE-2024-54383

  WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerability

  wpweb · WooCommerce PDF Vouchers

  Critical9.8
• CVE-2024-10114

  Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth provider

  WPWeb · WooCommerce - Social Login

  High8.1
• CVE-2024-49272

  WordPress Social Auto Poster plugin <= 5.3.15 - Cross Site Request Forgery (CSRF) vulnerability

  wpweb · Social Auto Poster

  Medium4.3
• CVE-2024-47369

  WordPress Social Auto Poster plugin <= 5.3.15 - Reflected Cross Site Scripting (XSS) vulnerability

  wpweb · Social Auto Poster

  High7.1
• CVE-2024-43131

  WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated Arbitrary Post/Page Deletion vulnerability

  WPWeb · Docket (WooCommerce Collections / Wishlist / Watchlist)

  High7.5