Skip to content
Newsletter
← All news
Online IncomeAugust 4, 2026 · 1 min read

Critical WooCommerce Social Login Plugin Vulnerability (CVE-2026-8457)

Mehmet Kocabaş
Mehmet Kocabaşupdated: August 4, 2026
Critical WooCommerce Social Login Plugin Vulnerability (CVE-2026-8457)

TL;DR

Unauthenticated attackers can log in as any user, including admin, via WooCommerce Social Login plugin. Update to 2.8.8+.

Source summary

A critical vulnerability in the WooCommerce Social Login WordPress plugin (CVE-2026-8457) enables unauthenticated attackers to log in as any existing user, including an administrator.

Wordfence recommends users of versions up to and including 2.8.7 update to version 2.8.8 or higher.

Source

Search Engine JournalOpen the original source