Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, including administrators, by supplying that user's email address.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-77000 The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a… https://www.cve.org/CVERecord?id=CVE-2026-77000
Post summary
CVE‑2026‑77000 reveals that the WP Social Media Login plugin fails to confirm completion of a social login before authenticating users.
CVE-2026-77000 WP Social Media Login Allows Unauthenticated Account Takeover via Email https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-77000
Post summary
The text announces CVE-2026-77000, a Woocommerce Social Media Login plugin flaw that enables unauthenticated account takeover via email, but provides no PoC, patch, or exploitation details.