Social Login by BestWebSoft

Social Login by BestWebSoft has one disclosed vulnerability in the WordSec catalog, all reported in 2017; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Social Login by BestWebSoft has a vendor fix available, so running the current release closes it.

All of these findings were reported by Neven Birusk. Social Login by BestWebSoft is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Social Login by BestWebSoft vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2017-18501

Social Login by BestWebSoft <= 0.1 - Multiple Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Social Login by BestWebSoft banner
Latestv1.4.5

Social Login by BestWebSoft

bestweblayout

Author

bestweblayout

5.0(2)
100/100
Last Updated
2025-06-12 (1y ago)
Active Installs
70+
Downloads
10,885
Requires WP
5.6.2+
Requires PHP
0+
Tested up to
WP 6.8.8
Created
2017-01-31 (10y ago)

Social login plugin adds website authentication via popular networks to WordPress login, registration and comments forms. Allow your visitors to login and comment with their existing accounts on Google, Facebook, Twitter, LinkedIn and Instagram. Install now and make forms filling for your visitors easier! View Demo Features Enable login with social networks: Google Facebook Twitter LinkedIn Discord [NEW] Amazon [NEW] Add to: Login form Registration form Comments form Select the default role for new users Enable user registration only via social buttons Link your social accounts to your existing WordPress account Compatible with latest WordPress version Incredibly simple settings for fast setup without modifying code Detailed step-by-step documentation and videos If you have a feature suggestion or idea you’d like to see in the plugin, we’d love to hear about it! Suggest a Feature Documentation [Doc] User Guide [Doc] Installation Help & Support Visit our Help Center if you have any questions, our friendly Support Team is happy to help – https://support.bestwebsoft.com/ Translation Spanish (es_ES) Russian (ru_RU) Ukrainian (uk) Some of these translations are not complete. We are constantly adding new features which should be translated. If you would like to create your own language pack or update the existing one, you can send the text of PO and MO files to BestWebSoft and we’ll add it to the plugin. You can download the latest version of the program for work with PO and MO files Poedit. Recommended Plugins Updater – Automatically check and update WordPress website core with all installed plugins and themes to the latest versions. BestWebSoft’s LinkedIn – Add LinkedIn Share and Follow buttons to WordPress posts, pages and widgets. 5 plugins included – profile, insider, etc. BestWebSoft’s Pinterest – Add Pinterest Follow, Save buttons and profile widgets (Pin, Board, Profile) to WordPress posts, pages and widgets. BestWebSoft’s Twitter – Add Twitter Follow, Tweet, Hashtag, and Mention buttons to WordPress posts and pages. BestWebSoft’s Like & Share – Add Facebook Follow, Like, and Share buttons to WordPress posts, pages, and widgets.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C