CVE-2026-77000
WP Social Media Login <= 1.0.6 - Unauthenticated Account Takeover via Twitter Login Flow
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, including administrators, by supplying that user's email address.
| Vendor | unknown |
| Product | wp social media login |
| Published | Aug 22, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown wp social media login
Be the first to know when new unknown vulnerabilities affecting unknown wp social media login are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / WP Social Media Login
0 ≤ 1.0.6
References
Credits
Khaled Alenazi (Nxploited) WPScan