The Super Socializer plugin for WordPress contains a security vulnerability that could allow unauthenticated attackers to mark messages as read without needing to authenticate. This vulnerability is present in versions up to, and including, 7.13.54 and can be exploited by tricking an administrator into clicking a malicious link. This is possible because several functions, such as heateor_ss_twitcount_notification_read, heateor_ss_gdpr_notification_read, heateor_ss_fb_redirection_notification_read, heateor_ss_twitter_callback_notification_read, heateor_ss_linkedin_redirect_url_notification_read, heateor_ss_fb_count_notification_read, and heateor_ss_twitter_new_callback_notification_read, do not have a nonce check in place.