Super Socializer vulnerabilities
3 known CVE vulnerabilities in Super Socializer, translated and rated.
- CVE-2026-65544High
Unauthenticated Cross Site Scripting (XSS) vulnerability in Super Socializer plugin up to version 7.14.5. An unauthenticated attacker can inject malicious scripts.
- CVE-2026-65542High
Unauthenticated Broken Authentication vulnerability in Super Socializer plugin up to version 7.14.5. An unauthenticated attacker can bypass authentication mechanisms.
- CVE-2026-11798Medium
The Super Socializer plugin for WordPress up to version 7.14.5 is vulnerable to Reflected Cross-Site Scripting via the 'heateor_mastodon_share' parameter due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts that execute when a user clicks a crafted link.

