Team Heateor
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Fancy Comments WordPress | 2 | – | Mar 27, 2024 |
| Heateor Social Login | 2 | – | Jun 8, 2024 |
| Super Socializer | 2 | – | Dec 13, 2024 |
| Heateor Social Login WordPress | 1 | – | Feb 10, 2024 |
| WordPress Social Comments Plugin for Vkontakte Comments and Disqus Comments | 1 | – | Apr 4, 2023 |
Exploited and recent CVEs
- CVE-2023-41802 WordPress Super Socializer plugin <= 7.13.54 - Broken Access Control vulnerability 0.7%
- CVE-2024-35706 WordPress Heateor Social Login WordPress plugin <= 1.1.32 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-35707 WordPress Heateor Social Login WordPress plugin <= 1.1.32 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-29804 WordPress Fancy Comments WordPress plugin <= 1.2.14 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-24712 WordPress Heateor Social Login Plugin <= 1.1.30 is vulnerable to Cross Site Scripting (XSS) 0.3%
- CVE-2023-35882 WordPress Super Socializer Plugin <= 7.13.52 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2023-23977 WordPress Heateor Social Comments Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2023-23670 WordPress Fancy Comments WordPress Plugin <= 1.2.10 is vulnerable to Cross Site Scripting (XSS) 0.4%