CyberSecBulletin

Siteheart vulnerabilities

We track 2 vulnerabilities in Siteheart products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 5, 2025.

2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score

Latest Siteheart vulnerabilities

  • 8.8 High severity

    HyperComments: Missing Authorization

    CVE-2025-5701SiteheartEPSS 2.23%

    The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hc_request_handler function in all versions up to, and including, 1.2.2. This makes it poss

  • 7.1 High severity

    HyperComments: Improper Neutralization of Input During Web Page Generation

    CVE-2025-23509Siteheart

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in siteheart HyperComments comments-with-hypercommentscom allows Reflected XSS.This issue affects HyperComments: from n/a through <= 0.9.6.