Authentication vulnerability in WooCommerce – Social Login 2.7.7

The plugin called “WooCommerce – Social Login” for WordPress has a security flaw that allows unauthorized people to log in as any user on the website, including administrators. This is because the plugin does not properly check the user’s information from the social media login. Attackers without an account on the site can use this loophole if they know the user’s email and the social media service.