Vulnerabilities / WPCOM Member
WPCOM Member vulnerabilities
Advisories WPSec published for WPCOM Member. Other sources may list more. Its attack surface: WPCOM Member on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-08 | WPSEC-2026-0664 | WPCOM Member <= 1.7.27 - Unauthenticated Authentication Bypass via Social Login 'uuid' Parameter | High 8.1 | 1.8.0 |
| 2026-10-08 | WPSEC-2026-0663 | WPCOM Member <= 1.7.27 - Cross-Site Request Forgery to Account Takeover via Social Login Binding | High 7.5 | 1.8.0 |
License: CC BY 4.0