Skip to content
OpenAdvisories

Vendor

Team Heateor

8 known vulnerabilities.

Products

Fancy Comments WordPress 2 Super Socializer 2 Heateor Social Login 2 WordPress Social Comments Plugin for Vkontakte Comments and Disqus Comments 1 Heateor Social Login WordPress 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-41802

    WordPress Super Socializer plugin <= 7.13.54 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Team Heateor Super Socializer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Super Socializer: from n/a through 7.13.54.

    Team Heateor Super Socializer
  • Medium 6.5
    CVE-2024-35707

    WordPress Heateor Social Login WordPress plugin <= 1.1.32 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Team Heateor Heateor Social Login allows Stored XSS.This issue affects Heateor Social Login: from n/a through 1.1.32.

    Team Heateor Heateor Social Login Web / CMS
  • Medium 6.5
    CVE-2024-29804

    WordPress Fancy Comments WordPress plugin <= 1.2.14 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Heateor Fancy Comments WordPress allows Stored XSS.This issue affects Fancy Comments WordPress: from n/a through 1.2.14.

    Team Heateor Fancy Comments WordPress Web / CMS
  • Medium 6.5
    CVE-2024-24712

    WordPress Heateor Social Login Plugin <= 1.1.30 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Team Heateor Heateor Social Login WordPress allows Stored XSS.This issue affects Heateor Social Login WordPress: from n/a through 1.1.30.

    Team Heateor Heateor Social Login WordPress Web / CMS
  • Medium 6.5
    CVE-2023-35882

    WordPress Super Socializer Plugin <= 7.13.52 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Team Heateor Super Socializer plugin <= 7.13.52 versions.

    Team Heateor Super Socializer
  • Medium 6.5
    CVE-2023-23977

    WordPress Heateor Social Comments Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Team Heateor WordPress Social Comments Plugin for Vkontakte Comments and Disqus Comments plugin <= 1.6.1 versions.

    Team Heateor WordPress Social Comments Plugin for Vkontakte Comments and Disqus Comments Web / CMS
  • Medium 6.5
    CVE-2023-23670

    WordPress Fancy Comments WordPress Plugin <= 1.2.10 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Team Heateor Fancy Comments WordPress plugin <= 1.2.10 versions.

    Team Heateor Fancy Comments WordPress Web / CMS