Wp Social Login and Register Social Counter — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Wp Social Login and Register Social Counter, with AI-generated Chinese analysis, references, and POCs.

Vendor: Wpmet

CVE ID	Title	CVSS	Severity	Published
CVE-2026-97344	Wp Social Login and Register Social Counter <= 3.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write CWE-79	6.4	Medium	2026-10-03
CVE-2025-13620	Wp Social Login and Register Social Counter <= 3.1.3 - Missing Authorization in Cache REST Endpoints to Social Counter Tampering CWE-862	5.3	Medium	2025-12-05
CVE-2025-1506	Wp Social Login and Register Social Counter <= 3.1.0 - Cross-Site Request Forgery to Settings Update CWE-352	4.3	Medium	2025-02-28
CVE-2024-9501	Wp Social Login and Register Social Counter <= 3.0.7 - Authentication Bypass via WordPress.com OAuth provider CWE-288	9.8	Critical	2024-10-26
CVE-2024-1763	Wp Social Login and Register Social Counter <= 3.0.0 - Missing Authorization to Unauthenticated Social Login/Share Status Update CWE-862	6.5	Medium	2024-03-13
CVE-2022-47160	WordPress Wp Social Plugin <= 1.9.0 is vulnerable to Sensitive Data Exposure CWE-200	6.5	Medium	2024-01-19

All 6 known CVE vulnerabilities affecting Wp Social Login and Register Social Counter with full Chinese analysis, references, and POCs where available.