Skip to content
OpenAdvisories

Vendor

heateor

8 known vulnerabilities.

Products

Social Sharing Plugin – Sassy Social Share 5 Heateor Social Login WordPress 2 Heateor Login – Social Login Plugin 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2024-10020

    Heateor Social Login WordPress <= 1.1.35 - Authentication Bypass via Disqus OAuth provider

    The Heateor Social Login WordPress plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.1.35. This is due to insufficient verification on the user being returned by the social login token. This makes it possible …

    heateor Heateor Social Login WordPress Web / CMS