CVE-2026-104803 | whyun WPCOM Member Plugin up to 1.7.27 on WordPress Social Login Callback weapp_new_user uuid/code improper authentication

October 10, 2026 Yanac

A vulnerability marked as critical has been reported in whyun WPCOM Member Plugin up to 1.7.27 on WordPress. This impacts the function weapp_new_user of the component Social Login Callback Handler. This manipulation of the argument uuid/code causes improper authentication.

This vulnerability is handled as CVE-2026-104803. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More