Medium · 5.4 CVE-2025-68998 EUVD-2025-205738GHSA-gh8v-5mx8-w74c

WordPress Heateor Social Login plugin <= 1.1.39 - Cross Site Request Forgery (CSRF) vulnerability

Published Dec 30, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Heateor Support Product: Heateor Social Login

Description

Cross-Site Request Forgery (CSRF) vulnerability in Heateor Support Heateor Social Login heateor-social-login allows Cross Site Request Forgery.This issue affects Heateor Social Login: from n/a through <= 1.1.39.

Affected products

Vendor	Product	Affected	Fixed
Heateor Support	Heateor Social Login	≤ 1.1.39	—

References

https://patchstack.com/database/Wordpress/Plugin/heateor-social-login/vulnerability/wordpress-heateor-social-login-plugin-1-1-39-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry