CVEs we hold for Wpweb

Records whose assigning authority named Wpweb as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-8457WooCommerce - Social Login <= 2.8.7 - Unauthenticated Authentication Bypass via Forged Apple 'id_token' JWTWPWeb WooCommerce - Social Login

CVE-2025-68547WordPress Follow My Blog Post plugin <= 2.4.0 - Arbitrary Content Deletion vulnerabilitywpweb Follow My Blog Post

CVE-2025-64258WordPress Follow My Blog Post plugin <= 2.3.9 - Sensitive Data Exposure vulnerabilitywpweb Follow My Blog Post

CVE-2025-62972WordPress WebinarPress plugin <= 1.33.28 - Broken Access Control vulnerabilityWPWebinarSystem WebinarPress

CVE-2025-47635WordPress WebinarPress plugin <= 1.33.28 - Server Side Request Forgery (SSRF) VulnerabilityWPWebinarSystem WebinarPress

CVE-2025-39472WordPress WooCommerce Social Login plugin < 2.8.3 - Cross Site Request Forgery (CSRF) vulnerabilitywpweb WooCommerce Social Login

CVE-2025-32693WordPress WebinarPress plugin <= 1.33.28 - Open Redirection VulnerabilityWPWebinarSystem WebinarPress

CVE-2025-31883WordPress WebinarPress plugin <= 1.33.28 - Cross Site Scripting (XSS) vulnerabilityWPWebinarSystem WebinarPress

CVE-2025-31882WordPress Webinar Plugin <= 1.33.28 - Broken Access Control vulnerabilityWPWebinarSystem WebinarPress

CVE-2024-7503WooCommerce - Social Login <= 2.7.5 - Authentication Bypass to Account TakeoverWPWeb WooCommerce - Social Login

CVE-2024-7027WooCommerce - PDF Vouchers <= 4.9.3 - Authentication Bypass to Voucher VendorWPWeb WooCommerce - PDF Vouchers

CVE-2024-6756Social Auto Poster <= 5.3.14 - Authenticated (Contributor+) Arbitrary File UploadWPWeb Social Auto Poster

CVE-2024-6755Social Auto Poster <= 5.3.14 - Missing Authorization to Unauthenticated Arbitrary Post DeletionWPWeb Social Auto Poster

CVE-2024-6754Social Auto Poster <= 5.3.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Update via…WPWeb Social Auto Poster

CVE-2024-6753Social Auto Poster <= 5.3.14 - Unauthenticated Stored Cross-Site ScriptingWPWeb Social Auto Poster

CVE-2024-6752Social Auto Poster <= 5.3.14 - Authenticated (Subscriber+) Stored Cross-Site ScriptingWPWeb Social Auto Poster

CVE-2024-6751Social Auto Poster <= 5.3.14 - Cross-Site Request Forgery via Multiple FunctionsWPWeb Social Auto Poster

CVE-2024-6750Social Auto Poster <= 5.3.14 - Missing Authorization via Multiple FunctionsWPWeb Social Auto Poster

CVE-2024-6637WooCommerce - Social Login <= 2.7.3 - Unauthenticated Privilege Escalation via One-Time PasswordWPWeb WooCommerce - Social Login

CVE-2024-6636WooCommerce - Social Login <= 2.7.3 - Missing Authorization to Unauthenticated Privilege EscalationWPWeb WooCommerce - Social Login

CVE-2024-6635WooCommerce - Social Login <= 2.7.3 - Unauthenticated Authentication BypassWPWeb WooCommerce - Social Login

CVE-2024-5871WooCommerce - Social Login <= 2.6.2 - Unauthenticated PHP Object InjectionWPWeb WooCommerce - Social Login

CVE-2024-5868WooCommerce - Social Login <= 2.6.2 - Email Verification due to Insufficient RandomnessWPWeb WooCommerce - Social Login

CVE-2024-56265WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Cross Site Scripting (XSS) vulnerabilitywpweb WooCommerce PDF Vouchers

CVE-2024-54383WordPress WooCommerce - PDF Vouchers plugin < 4.9.9 - Broken Authentication vulnerabilitywpweb WooCommerce PDF Vouchers

CVE-2024-52347WordPress Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera plugin <= 4.0 - Cross Site Scripting…wpwebsitecreator Website remote Install vor Gravity…

CVE-2024-49272WordPress Social Auto Poster plugin <= 5.3.15 - Cross Site Request Forgery (CSRF) vulnerabilitywpweb Social Auto Poster

CVE-2024-47369WordPress Social Auto Poster plugin <= 5.3.15 - Reflected Cross Site Scripting (XSS) vulnerabilitywpweb Social Auto Poster

CVE-2024-43132WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated SQL Injection…WPWeb Elite Docket (WooCommerce Collections / Wishlist /…

CVE-2024-43131WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) plugin < 1.7.0 - Unauthenticated Arbitrary Post/Page…WPWeb Docket (WooCommerce Collections / Wishlist /…

CVE-2024-39652WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerabilityWPWeb Elite WooCommerce PDF Vouchers

CVE-2024-39651WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Arbitrary File Deletion vulnerabilityWPWeb WooCommerce PDF Vouchers

CVE-2024-39650WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Unauthenticated Multiple VulnerabilitiesWPWeb Elite WooCommerce PDF Vouchers

CVE-2024-37502WordPress Social Login plugin <= 2.6.3 - PHP Object Injection vulnerabilitywpweb WooCommerce Social Login

CVE-2024-11271WordPress Webinar Plugin – WebinarPress <= 1.33.24 - Missing Authorization to Authenticated (Subscriber+) Webinar…wpwebinarsystem WebinarPress – Webinar System for WordPress

CVE-2024-11270WordPress Webinar Plugin – WebinarPress <= 1.33.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary…wpwebinarsystem WebinarPress – Webinar System for WordPress

CVE-2024-10114Social Login - WordPress / WooCommerce Plugin <= 2.7.7 - Authentication Bypass via WordPress.com OAuth providerWPWeb WooCommerce - Social Login

37 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.