Vulnerabilities / Wp Social
Wp Social vulnerabilities
Advisories WPSec published for Wp Social Login and Register Social Counter. Other sources may list more. Its attack surface: Wp Social on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-01 | WPSEC-2026-0036 | Wp Social <= 3.2.1 - Cross-Site Request Forgery to Social Login Provider Settings Update | Medium 4.3 | 3.2.2 |
| 2026-10-01 | WPSEC-2026-0035 | Wp Social <= 3.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Alt Attribute | Medium 6.4 | 3.2.2 |
License: CC BY 4.0