UsersWP – Social Login

UsersWP – Social Login has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 7.3, and the most serious one scores 7.3 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Improper Privilege Management, behind 1 of the records (100%).

The one issue recorded for UsersWP – Social Login has a vendor fix available, so running the current release closes it.

All of these findings were reported by Pedro Pinho. UsersWP – Social Login is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.2.

Strategic Overview

Avg CVSSHigh

7.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all UsersWP – Social Login vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.3CVE-2026-86814

UsersWP - Social Login <= 1.5.9 - Unauthenticated Privilege Escalation

Read the full analysis

Vulnerability Records

1 records


2026-09-17 00:00	UsersWP - Social Login <= 1.5.9 - Unauthenticated Privilege Escalation UsersWP <= 1.5.9	`CVE-2026-86814`	7.3 High	Pedro Pinho	Yes

Showing 1–1 of 1 reports

Latestv1.5.10

UsersWP – Social Login

Author

Stiofan

3.3(4)

66/100

Last Updated

2026-09-09 (14d ago)

Active Installs

2,000+

Downloads

140,745

Requires WP

6.1+

Requires PHP

Tested up to

WP 7.1.2

Created

2020-01-31 (7y ago)

Requires Plugins

userswp

Social Login addon for UsersWP. This addon lets your user to register and login with popular sites like Facebook, Google, X, LinkedIn, Yahoo, WordPress etc. 100% translatable. Security To report a security vulnerability, please review our vulnerability disclosure policy.

View on WordPress.org