WP
Vendor
wpweb
25
CVEs
0
On KEV
0
New 30D
Products
SA8.8
Social Auto Poster
wpweb
9 CVEs0 on KEV0 new
WS9.8
WooCommerce Social Login
wpweb
8 CVEs0 on KEV0 new
WP9.8
WooCommerce PDF Vouchers
wpweb
5 CVEs0 on KEV0 new
FM7.5
Follow My Blog Post
wpweb
2 CVEs0 on KEV0 new
DW7.5
Docket (WooCommerce Collections / Wishlist / Watchlist)
WPWeb
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-8457 | WS WooCommerce - Social Login WPWeb | 9.8 | Aug 1 | WooCommerce - Social Login <= 2.8.7 - Unauthenticated Authentication Bypass via Forged Apple 'id_token' JWT |
| CVE-2025-68547 | FM Follow My Blog Post wpweb | 7.5 | Jan 5 | WordPress Follow My Blog Post plugin <= 2.4.0 - Arbitrary Content Deletion vulnerability |
| CVE-2025-64258 | FM Follow My Blog Post wpweb | 7.5 | Dec 18 | WordPress Follow My Blog Post plugin <= 2.3.9 - Sensitive Data Exposure vulnerability |
| CVE-2025-39472 | WS WooCommerce Social Login wpweb | 8.8 | Apr 16 | WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-56265 | WP WooCommerce PDF Vouchers wpweb | 6.1 | Dec 31 | WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-54383 | WP WooCommerce PDF Vouchers wpweb | 9.8 | Dec 18 | WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerability |
| CVE-2024-10114 | WS WooCommerce - Social Login WPWeb | 8.1 | Nov 5 | Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth provider |
| CVE-2024-39650 | WP Woocommerce Pdf Vouchers Wpweb | 9.8 | Nov 1 | WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Multiple Vulnerabilities |
| CVE-2024-49272 | SA Social Auto Poster wpweb | 8.8 | Oct 20 | WordPress Social Auto Poster plugin <= 5.3.15 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-47369 | SA Social Auto Poster wpweb | 6.1 | Oct 5 | WordPress Social Auto Poster plugin <= 5.3.15 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-43131 | DW Docket (WooCommerce Collections / Wishlist / Watchlist) WPWeb | 7.5 | Aug 13 | WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated Arbitrary Post/Page Deletion vulnerability |
| CVE-2024-39651 | WP WooCommerce PDF Vouchers WPWeb | 9.3 | Aug 13 | WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Arbitrary File Deletion vulnerability |
| CVE-2024-7503 | WS WooCommerce - Social Login WPWeb | 9.8 | Aug 10 | WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account Takeover |
| CVE-2024-6755 | SA Social Auto Poster WPWeb | 5.3 | Jul 24 | Social Auto Poster <= 5.3.14 - Missing Authorization to Unauthenticated Arbitrary Post Deletion |
| CVE-2024-6751 | SA Social Auto Poster WPWeb | 6.5 | Jul 24 | Social Auto Poster <= 5.3.14 - Cross-Site Request Forgery via Multiple Functions |
| CVE-2024-7027 | WP WooCommerce - PDF Vouchers WPWeb | 7.3 | Jul 24 | WooCommerce - PDF Vouchers <= 4.9.3 - Authentication Bypass to Voucher Vendor |
| CVE-2024-6754 | SA Social Auto Poster WPWeb | 4.3 | Jul 24 | Social Auto Poster <= 5.3.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update via wpw_auto_poster_update_tweet_template |
| CVE-2024-6753 | SA Social Auto Poster WPWeb | 6.1 | Jul 24 | Social Auto Poster <= 5.3.14 - Unauthenticated Stored Cross-Site Scripting |
| CVE-2024-6752 | SA Social Auto Poster WPWeb | 5.4 | Jul 24 | Social Auto Poster <= 5.3.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting |
| CVE-2024-6750 | SA Social Auto Poster WPWeb | 7.5 | Jul 24 | Social Auto Poster <= 5.3.14 - Missing Authorization via Multiple Functions |
| CVE-2024-6756 | SA Social Auto Poster WPWeb | 8.8 | Jul 24 | Social Auto Poster <= 5.3.14 - Authenticated (Contributor+) Arbitrary File Upload |
| CVE-2024-6636 | WS WooCommerce - Social Login WPWeb | 9.8 | Jul 20 | WooCommerce - Social Login <= 2.7.3 - Missing Authorization to Unauthenticated Privilege Escalation |
| CVE-2024-6635 | WS WooCommerce - Social Login WPWeb | 7.3 | Jul 20 | WooCommerce - Social Login <= 2.7.3 - Unauthenticated Authentication Bypass |
| CVE-2024-6637 | WS WooCommerce - Social Login WPWeb | 7.3 | Jul 20 | WooCommerce - Social Login <= 2.7.3 - Unauthenticated Privilege Escalation via One-Time Password |
| CVE-2024-37502 | WS WooCommerce Social Login wpweb | 7.5 | Jul 9 | WordPress Social Login plugin <= 2.6.3 - PHP Object Injection vulnerability |