Now officially on WordPress.org

CVE Database / CVE-2025-13620

CVE · Medium

CVE-2025-13620 — Wp Social Login and Register Social Counter [wp-social] < 3.1.4

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-13620 Wp Social Login and Register Social Counter [wp-social] < 3.1.4 Missing Authorization Medium 5.3 < 3.1.4 3.1.4 2025-12-04 —

CVE-2025-13620

The Wp Social Login and Register Social Counter plugin, used in WordPress installations up to version 3.1.3, contains a security weakness related to inadequate access control. Specifically, certain routes within the plugin's REST API are configured with overly permissive permissions, allowing unauthorized individuals to exploit this vulnerability via specially crafted requests and manipulate the social counter cache.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings