CVE-2026-77000

Name of the Vulnerable Software and Affected Versions WP Social Media Login versions prior to 1.0.7

Description The WP Social Media Login WordPress plugin fails to verify if a social login process was successfully completed with the identity provider before authenticating a visitor. This allows unauthenticated attackers to gain access to any existing user account, including those with administrator privileges, by providing the target user's email address.

Recommendations Update WP Social Media Login to version 1.0.7 or later.