{"uuid": "5af032f0-e562-4559-bfe4-4e017c364a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8457", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms2tix7ur22o", "content": "WPWeb WooCommerce - Social Login (&lt;=2.8.7) has a CRITICAL auth bypass (CVE-2026-8457): attackers can impersonate any WordPress user, incl. admins. Disable Apple login or the plugin until patched. https://radar.offseq.com/threat/cve-2026-8457-cwe-289-authentication-bypass-by-alternate-name-in-wpwe...", "creation_timestamp": "2026-08-02T01:30:29.103303Z"}