{"id":4052,"date":"2026-08-04T12:54:03","date_gmt":"2026-08-04T12:54:03","guid":{"rendered":"https:\/\/justfineinfotech.com\/woocommerce-social-login-wordpress-plugin-enables-full-site-takeover\/"},"modified":"2026-08-04T12:54:03","modified_gmt":"2026-08-04T12:54:03","slug":"woocommerce-social-login-wordpress-plugin-enables-full-site-takeover","status":"publish","type":"post","link":"https:\/\/justfineinfotech.com\/fr\/woocommerce-social-login-wordpress-plugin-enables-full-site-takeover\/","title":{"rendered":"WooCommerce Social Login WordPress Plugin Enables Full Site Takeover"},"content":{"rendered":"

A critical vulnerability in the WooCommerce Social Login WordPress<\/a> plugin enables unauthenticated attackers to log in as any existing user, including an administrator. The authentication bypass vulnerability is rated 9.8 out of 10 and affects all versions up to and including 2.8.7<\/p>\n

WooCommerce Social Login Plugin<\/h2>\n

The WooCommerce Social Login plugin enables frictionless one-click login for ecommerce store customers and enables fast checkout using accounts from services such as Facebook, Google, Amazon, PayPal, and Apple<\/p>\n

Unauthenticated Authentication Bypass<\/h2>\n

This vulnerability is especially concerning because attackers do not need to acquire any user permission role to exploit it<\/p>\n

The vulnerability affects the plugin\u2019s Apple login handler, which processes the information received when someone signs in with an Apple account<\/p>\n

Apple provides an identity token containing information about the person attempting to log in. The token is protected by a digital signature that should be checked against Apple\u2019s public keys to confirm that it is authentic. This is where the plugin fails, enabling attackers to provide the email address of an existing user and gain access to that account<\/p>\n

According to Wordfence<\/a>:<\/em><\/p>\n

\n

\u201cThis makes it possible for unauthenticated attackers to log in as any existing WordPress user \u2014 including administrators \u2014 by supplying a forged id_token whose payload contains the target user\u2019s email address, as that email is used without any role exclusion to resolve a WordPress account and immediately issue an authenticated session for it.\u201d<\/p>\n<\/blockquote>\n

Because administrator accounts are not excluded from this exploit, a successful attack could provide administrative access to the WooCommerce site that uses this plugin<\/p>\n

The vulnerability was assigned the Common Vulnerabilities and Exposures identifier CVE-2026-8457 and publicly disclosed on August 1, 2026<\/p>\n

Wordfence recommends that users of versions up to and including 2.8.7 should update to version 2.8.8 or higher version<\/p>\n

Featured Image by Shutterstock\/file404<\/em><\/p>\n

CategoryNewsWordPress<\/p>\n

\n

\n En rapport:<\/strong>
\n
\n Formation en automatisation num\u00e9rique au B\u00e9nin\u00a0: 5 comp\u00e9tences cl\u00e9s recherch\u00e9es par les employeurs en 2026
\n <\/a>\n <\/p>\n

\n <a href="https:\/\/yoursite.com\/automation-africa\/" title="Quoi<\/a>Marketing Automation Africa : 6 erreurs dangereuses commises par les marques au Nig\u00e9ria\u201d>
\n Automatisation du marketing WhatsApp en Afrique\u00a0: 6 erreurs dangereuses commises par les marques au Nig\u00e9ria
\n <\/a>\n <\/p>\n<\/div>\n

\n

Vous souhaitez apprendre cela de mani\u00e8re pratique ?<\/h3>\n

Rejoindre Justfine Infotech<\/strong> et construire de vrais comp\u00e9tences num\u00e9riques<\/a> dans les domaines de l'IA, de l'automatisation, du d\u00e9veloppement web, du marketing digital, de la bureautique, du e-commerce, du travail ind\u00e9pendant et de la cybers\u00e9curit\u00e9.<\/p>\n

Programmes disponibles :<\/strong>
\n Certificat de 6 semaines \u2022 Certificat professionnel de 3 mois \u2022 Dipl\u00f4me de 6 mois \u2022 Dipl\u00f4me professionnel complet<\/p>\n

WhatsApp :<\/strong>
\n +229 01 57 57 99 15
\n +229 01 66 68 11 60<\/p>\n

Inscrivez-vous d\u00e8s maintenant<\/a><\/p>\n<\/div>\n

Source: www.searchenginejournal.com<\/a><\/p>","protected":false},"excerpt":{"rendered":"

A critical vulnerability in the WooCommerce Social Login WordPress plugin enables unauthenticated attackers to log in as any existing user, including an administrator. The authentication bypass vulnerability is rated 9.8 out of 10 and affects all versions up to and including 2.8.7<\/p>","protected":false},"author":1,"featured_media":4054,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[70],"tags":[1023,189,119,326,188],"class_list":["post-4052","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-e-commerce-digital-payments","tag-login","tag-plugin","tag-social","tag-woocommerce","tag-wordpress"],"_links":{"self":[{"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/posts\/4052","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/comments?post=4052"}],"version-history":[{"count":1,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/posts\/4052\/revisions"}],"predecessor-version":[{"id":4053,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/posts\/4052\/revisions\/4053"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/media\/4054"}],"wp:attachment":[{"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/media?parent=4052"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/categories?post=4052"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/justfineinfotech.com\/fr\/wp-json\/wp\/v2\/tags?post=4052"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}