Lazy Social Comments
Lazy Social Comments has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Lazy Social Comments has a vendor fix available, so running the current release closes it.
All of these findings were reported by yuyudhn. Lazy Social Comments is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.3.10.
CVE-2023-23733Lazy Social Comments <= 2.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Options
Read the full analysisVulnerability Records

Lazy Social Comments
Author
Joel James
Use Facebook comments system in your website without slowing down your website. This plugin add an extra feature to lazy load Facebook comments after clicking a button or scrolling down. Simple plugin to add Facebook Comments to your website easily. It works perfectly with latest version of WordPress. Lazy FB Comments – Features Add most popular Facebook commenting system in your website. Lazy Load Facebook scripts and comments only after clicking a button or scrolling down. Translation ready! Adjust number of comments, color scheme, language, width, sorting order etc.. Facebook comments increases your audience. Customize button label. Super Light weight. Completely free to use with lifetime updates. Developer friendly. Follows best WordPress coding standards. Of course, available in GitHub Installation | Screenshots Bug Reports Bug reports are always welcome. Report here. More information Follow the developer @Twitter Other WordPress plugins by Joel James for Duck Dev Other Requirements You need to create an APP in your Facebook developer console, and get the APP ID from here. Bug Reports Bug reports are always welcome. Report here.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C