PLUGIN SECURITY
Is Wp Social safe?
Wp social lets you add social login, social counter, and social share buttons of different styles to your WordPress website.
What this plugin does
- Slug:
wp-social - Author: Roxnor
- 80000+ active installs
- 92/100 rating (67 reviews on wordpress.org)
- 1045500 all-time downloads
- On WordPress.org since 2010-08-19
socialsocial countersocial loginsocial shareWordPress Social login and register
Maintenance status
- Latest known version: 3.2.1
- Last updated: 2026-08-04 11:28am GMT
- Tested up to WordPress: 7.0.4
- Requires PHP: 7.4+
Known vulnerabilities
5 known CVEs on file for Wp Social.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-13620 | Wp Social Login and Register Social Counter [wp-social] < 3.1.4 | Missing Authorization | Medium 5.3 | < 3.1.4 | 3.1.4 | 2025-12-04 | ✓ fixed in latest |
| CVE-2024-9501 | Wp Social Login and Register Social Counter [wp-social] < 3.0.8 | Authentication Bypass Using an Alternate Path or Channel | Critical 9.8 | < 3.0.8 | 3.0.8 | 2024-10-25 | ✓ fixed in latest |
| CVE-2024-1763 | Wp Social Login and Register Social Counter [wp-social] < 3.0.1 | Missing Authorization | Medium 5.3 | < 3.0.1 | 3.0.1 | 2024-02-29 | ✓ fixed in latest |
| CVE-2022-47160 | Wp Social Login and Register Social Counter [wp-social] < 2.0 | Exposure of Sensitive Information to an Unauthorized Actor | Medium 6.5 | < 2.0 | 2.0 | 2022-12-14 | ✓ fixed in latest |
| — | Wp Social Login and Register Social Counter [wp-social] < 3.1.1 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 3.1.1 | 3.1.1 | 0000-00-00 | ✓ fixed in latest |
| CVE-2025-1506 | Wp Social Login and Register Social Counter < 3.1.1 - Cross-Site Request Forgery to Settings Update | — | Unknown | < 3.1.1 | 3.1.1 | — | ✓ fixed in latest |
How to fix it
Keep Wp Social updated — 3.2.1 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- AddToAny Share Buttons — 300000+ active installs — 94/100 (1114)
- Social Media Share Buttons & Social Sharing Icons — 100000+ active installs — 96/100 (5333) — max PHP 8.4
- Metricool – Social media and site statistics — 80000+ active installs — 90/100 (21)
- Ocean Social Sharing — 60000+ active installs — 90/100 (11) — max PHP 8.4
- Buttonizer – Social Media Share Buttons, Social Icons, & Social Feeds — 40000+ active installs — 96/100 (396) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.