Lazy Social Comments

Lazy Social Comments has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Lazy Social Comments has a vendor fix available, so running the current release closes it.

All of these findings were reported by yuyudhn. Lazy Social Comments is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.3.10.

Strategic Overview

Avg CVSSMedium
4.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Lazy Social Comments vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.4CVE-2023-23733

Lazy Social Comments <= 2.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Options

Read the full analysis

Vulnerability Records

1 records
Lazy Social Comments banner
Latestv2.0.5

Lazy Social Comments

Joel James

Author

Joel James

4.5(19)
90/100
Last Updated
2023-09-03 (3y ago)
Active Installs
1,000+
Downloads
47,000
Requires WP
3.0+
Requires PHP
0+
Tested up to
WP 6.3.10
Created
2014-07-12 (12y ago)

Use Facebook comments system in your website without slowing down your website. This plugin add an extra feature to lazy load Facebook comments after clicking a button or scrolling down. Simple plugin to add Facebook Comments to your website easily. It works perfectly with latest version of WordPress. Lazy FB Comments – Features Add most popular Facebook commenting system in your website. Lazy Load Facebook scripts and comments only after clicking a button or scrolling down. Translation ready! Adjust number of comments, color scheme, language, width, sorting order etc.. Facebook comments increases your audience. Customize button label. Super Light weight. Completely free to use with lifetime updates. Developer friendly. Follows best WordPress coding standards. Of course, available in GitHub Installation | Screenshots Bug Reports Bug reports are always welcome. Report here. More information Follow the developer @Twitter Other WordPress plugins by Joel James for Duck Dev Other Requirements You need to create an APP in your Facebook developer console, and get the APP ID from here. Bug Reports Bug reports are always welcome. Report here.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C