Skip to main content

Woocommerce Social Login CVE-2024-37502

MEDIUM
Deserialization of Untrusted Data (CWE-502)
2024-07-09 audit@patchstack.com
WordPress Deserialization Woocommerce Social Login Wordpress Plugin Wpwebelite
5.4
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.4 MEDIUM
AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

4
Severity Changed
Apr 23, 2026 - 15:22 NVD
HIGH MEDIUM
CVSS changed
Apr 23, 2026 - 15:22 NVD
7.5 (HIGH) 5.4 (MEDIUM)
CVE Published
Jul 09, 2024 - 09:15 nvd
HIGH 7.5
CVE Published
Jul 09, 2024 - 09:15 cve.org
MEDIUM 5.4

DescriptionCVE.org

Deserialization of Untrusted Data vulnerability in wpweb WooCommerce Social Login woo-social-login.This issue affects WooCommerce Social Login: from n/a through <= 2.6.3.

AnalysisAI

Deserialization of Untrusted Data vulnerability in wpweb WooCommerce Social Login woo-social-login.6.3. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Deserialization of Untrusted Data (CWE-502), which allows attackers to execute arbitrary code through malicious serialized objects. Deserialization of Untrusted Data vulnerability in wpweb WooCommerce Social Login woo-social-login.6.3. Affected products include: Wpwebelite Woocommerce Social Login.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Avoid deserializing untrusted data. Use safe serialization formats (JSON). Implement integrity checks and type allowlists.

More in Woocommerce Social Login

View all
CVE-2024-5871 CRITICAL
9.8 Jun 15

The WooCommerce - Social Login plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and inc
CVE-2024-7503 CRITICAL
9.8 Aug 12

The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in versions up to, and includ
CVE-2024-6636 CRITICAL
9.8 Jul 20

The WooCommerce - Social Login plugin for WordPress is vulnerable to unauthorized modification of data due to a missing

CVE-2024-10114 HIGH
8.1 Nov 05

The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and in
CVE-2024-6637 HIGH
7.3 Jul 20

The WooCommerce - Social Login plugin for WordPress is vulnerable to unauthenticated privilege escalation in all version
CVE-2024-6635 HIGH
7.3 Jul 20

The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in versions up to, and includ
CVE-2024-5868 MEDIUM
6.5 Jun 15

The WooCommerce - Social Login plugin for WordPress is vulnerable to Email Verification in all versions up to, and inclu
CVE-2025-39472 MEDIUM
4.3 Apr 16

Cross-Site Request Forgery (CSRF) vulnerability in WPWeb WooCommerce Social Login allows Cross Site Request Forgery.8.3.

Same weakness CWE-502 – Deserialization of Untrusted Data

View all
CVE-2021-35464 CRITICAL POC
9.8
CVE-2020-10189 CRITICAL POC
9.8
CVE-2019-18935 CRITICAL POC
9.8
CVE-2015-7450 CRITICAL POC
9.8
CVE-2025-53770 CRITICAL POC
9.8
CVE-2020-7961 CRITICAL POC
9.8
CVE-2021-42237 CRITICAL POC
9.8
CVE-2025-24016 CRITICAL POC
9.9

Same technique Deserialization

View all
CVE-2015-7450 CRITICAL POC
9.8
CVE-2025-53770 CRITICAL POC
9.8
CVE-2020-7961 CRITICAL POC
9.8
CVE-2021-42237 CRITICAL POC
9.8
CVE-2025-24016 CRITICAL POC
9.9
CVE-2020-0618 HIGH POC
8.8
CVE-2015-4852 CRITICAL POC
9.8
CVE-2025-49113 CRITICAL POC
9.9

Share

CVE-2024-37502 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy