<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: social login</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-11087: The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon plugin for WordPress i</title><link>https://patchthecve.com/cve/CVE-2024-11087.html</link><guid>https://patchthecve.com/cve/CVE-2024-11087.html</guid><pubDate>Wed, 17 Jun 2026 06:57:02 +0000</pubDate><description>HIGH 8.1: The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 200.3.9. This is due to insufficient verification on the user being returned by the social login token. This makes</description></item><item><title>CVE-2024-10020: The Heateor Social Login WordPress plugin for WordPress is vulnerable to authentication bypass in all versions</title><link>https://patchthecve.com/cve/CVE-2024-10020.html</link><guid>https://patchthecve.com/cve/CVE-2024-10020.html</guid><pubDate>Wed, 17 Jun 2026 06:54:46 +0000</pubDate><description>HIGH 8.1: The Heateor Social Login WordPress plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.1.35. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticated attackers to log in a</description></item><item><title>CVE-2024-35706: Improper Neutralization of Input During Web Page Generation (XSS or &#x27;Cross-site Scripting&#x27;) vulnerability in T</title><link>https://patchthecve.com/cve/CVE-2024-35706.html</link><guid>https://patchthecve.com/cve/CVE-2024-35706.html</guid><pubDate>Wed, 17 Jun 2026 07:35:13 +0000</pubDate><description>HIGH 7.1: Improper Neutralization of Input During Web Page Generation (XSS or &#x27;Cross-site Scripting&#x27;) vulnerability in Team Heateor Heateor Social Login allows Cross-Site Scripting (XSS).This issue affects Heateor Social Login: from n/a through 1.1.32.</description></item><item><title>CVE-2024-35707: Improper Neutralization of Input During Web Page Generation (XSS or &#x27;Cross-site Scripting&#x27;) vulnerability in T</title><link>https://patchthecve.com/cve/CVE-2024-35707.html</link><guid>https://patchthecve.com/cve/CVE-2024-35707.html</guid><pubDate>Wed, 17 Jun 2026 07:35:13 +0000</pubDate><description>MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or &#x27;Cross-site Scripting&#x27;) vulnerability in Team Heateor Heateor Social Login allows Stored XSS.This issue affects Heateor Social Login: from n/a through 1.1.32.</description></item><item><title>CVE-2024-32674: Heateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability</title><link>https://patchthecve.com/cve/CVE-2024-32674.html</link><guid>https://patchthecve.com/cve/CVE-2024-32674.html</guid><pubDate>Wed, 17 Jun 2026 07:30:12 +0000</pubDate><description>MEDIUM 5.4: Heateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the website using the product.</description></item></channel></rss>