Vulnerability Description
The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, including administrators, by supplying that user's email address.
References
FAQ
What is CVE-2026-77000?
CVE-2026-77000 is a documented vulnerability. The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated...
How severe is CVE-2026-77000?
CVSS scoring is not yet available for CVE-2026-77000. Check NVD for updates.
Is there a patch for CVE-2026-77000?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.