CVE-2026-103898 | roxnor Wp Social Login and Register Social Counter Plugin REST Callback admin-create-user.php wp_set_auth_cookie improper authentication

A vulnerability identified as critical has been detected in roxnor Wp Social Login and Register Social Counter Plugin up to 3.2.2 on WordPress. This impacts the function wp_set_auth_cookie of the file inc/admin-create-user.php of the component REST Callback Handler. The manipulation of the argument email leads to improper authentication.

This vulnerability is referenced as CVE-2026-103898. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More