Skip to content
OpenAdvisories
High · 7.1 CVE-2024-35706 EUVD-2024-35464GHSA-vxr7-mhw4-9577

WordPress Heateor Social Login WordPress plugin <= 1.1.32 - Cross Site Scripting (XSS) vulnerability

Published Jun 8, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Team Heateor Product: Heateor Social Login Category: Web / CMS

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Team Heateor Heateor Social Login allows Cross-Site Scripting (XSS).This issue affects Heateor Social Login: from n/a through 1.1.32.

Affected products

VendorProductAffectedFixed
Team Heateor Heateor Social Login ≤ 1.1.32 —

References