An authentication bypass vulnerability in the Wp Social Login and Register Social Counter plugin allows unauthenticated attackers to gain full access to any…
Affected component: Wp Social Login and Register Social Counter (plugin)
Fixed in: 3.2.3
PowerSEC coverage: PowerSEC detects the affected versions on every plan, and has since November 4, 2026. No PowerSEC firewall rule blocks this attack. Update to 3.2.3 or later to remove the vulnerability.
Full advisory, including detection steps and remediation: https://powersec.io/vulnerability/cve-2026-103898