What is CVE-2026-8457?

CVE-2026-8457 is a critical-severity vulnerability in Wpweb Woocommerce - Social Login, classified under CWE-289. CVSS score: 9.8/10. Published 2026-08-02.

How severe is CVE-2026-8457?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Wpweb Woocommerce - Social Login

CVE-2026-8457

The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to and including 2.8.7. This is due to the plugin's Apple login handler accepting the Apple id_token and decoding only its base64…

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Wpweb Woocommerce - Social Login — versions 0

Weakness classification (CWE)

CWE-289

References

security@wordfence.com
security@wordfence.com

Frequently asked questions

What is CVE-2026-8457?: CVE-2026-8457 is a critical-severity vulnerability in Wpweb Woocommerce - Social Login, classified under CWE-289. CVSS score: 9.8/10. Published 2026-08-02.
How severe is CVE-2026-8457?: Critical severity. CVSS v3 base score is 9.8 out of 10.