Read the docs

Team Heateor

Records26All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Team Heateor records in CISA KEV

No Team Heateor vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

7 records in Super Socializer · all components

Priority MEDIUM 58

The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.44 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users wit…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00476 Published 2023-01-16 Fixed in 7.13.44
Priority MEDIUM 55

The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.64 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Sc…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.005 Published 2024-04-15 Fixed in 7.13.64 CWE-79
Priority LOW 31

The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.30 does not sanitise and escape the urls parameter in its the_champ_sharing_count AJAX action (available to both unauthenticated and…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01938 Published 2022-04-11 Fixed in 7.13.30 CWE-79
Priority LOW 30

The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to Limited SQL Injection via the ‘SuperSocializerKey’ parameter in all versions up to, and including, 7.14 d…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00451 Published 2025-01-21 No fix listed CWE-89
Priority LOW 21

Missing Authorization vulnerability in Team Heateor Super Socializer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Super Socializer: from n/a through 7.13.54.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00729 Published 2024-12-13 No fix listed CWE-862
Open these records in search →