https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T02:52:50.133894+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-6635 CVE-2024-6635 — WooCommerce - Social Login <= 2.7.3 - Unauthenticated Authentication Bypass 2026-10-08T02:52:50.151084+00:00

Affected: WPWeb WooCommerce - Social Login, wpweb woocommerce_social_login

The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.3. This is due to insufficient controls in the 'woo_slg_login_email' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, excluding an administrator, if they know the email of user.