CVE-2026-77001

Name of the Vulnerable Software and Affected Versions Social Login & Sharing buttons with Analytics By SoClever versions prior to 1.2.1

Description The plugin fails to perform authentication, authorization, or nonce checks in a publicly accessible login handler. This allows unauthenticated attackers to obtain a valid session for any existing user, including administrators. By default, an attacker can gain a session as the site's original administrator account without requiring any account details.

Recommendations Update Social Login & Sharing buttons with Analytics By SoClever to a version newer than 1.2.0.