Vulnerabilities / Log in with Google
Log in with Google vulnerabilities
Advisories WPSec published for Log in with Google. Other sources may list more. Its attack surface: Log in with Google on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-07 | WPSEC-2026-2707 | Log in with Google <= 1.4.4 - Unauthenticated Login Cross-Site Request Forgery via OAuth and One Tap State Validation | Medium 5.4 | 1.4.5 |
| 2026-11-07 | WPSEC-2026-2706 | Log in with Google <= 1.4.4 - Unauthenticated Authentication Bypass of Two-Factor and Login Checks via One Tap Login | High 8.1 | 1.4.5 |
License: CC BY 4.0