Access violation vulnerability in Social Share, Social Login and Social Comments Plugin – Super Socializer 7.13.54

. The Super Socializer plugin for WordPress is vulnerable to unauthorized changes in data because it is not properly checking privileges on certain functions. These functions, such as heateor_ss_twitcount_notification_read, heateor_ss_gdpr_notification_read, heateor_ss_fb_redirection_notification_read, heateor_ss_twitter_callback_notification_read, heateor_ss_linkedin_redirect_url_notification_read, heateor_ss_fb_count_notification_read, heateor_ss_twitter_new_callback_notification_read, and more, are found in versions up to 7.13.54 of the plugin. This means that attackers with a subscriber-level access and above can mark messages as read without permission.