CVE-2026-103898 Wp Social Login and Register Social Counter - Authentication Bypass

Wp Social Login and Register Social Counter plugin for WordPress <= 3.2.2 contains an authentication bypass caused by improper verification of OAuth provider email in the social login REST callback, letting unauthenticated attackers gain authenticated sessions as any user, exploit requires attacker-controlled OAuth account with matching email.