Cross-Site Request Forgery Vulnerability in Heateor Social Login by Heateor

CVE-2025-68998

What is CVE-2025-68998?

Heateor Social Login is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. This flaw enables an attacker to trick a user into executing unwanted actions on the affected application without their consent. Specifically, it occurs when the plugin fails to verify requests correctly, potentially allowing unauthorized actions under the guise of a legitimate user. Users of versions up to and including 1.1.39 are particularly at risk, emphasizing the need for prompt updates and security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References