heateor

7 results · Clear filters · Feed

• Medium 6.4
  CVE-2025-9857

  Heateor Login – Social Login Plugin <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

  The Heateor Login – Social Login Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'Heateor_Facebook_Login' shortcode in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escapin…

  heateor Heateor Login – Social Login Plugin Web / CMS
  Sep 10, 2025
• Medium 6.1
  CVE-2025-5528

  Social Sharing Plugin – Sassy Social Share <= 3.3.75 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter

  The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the heateor_mastodon_share parameter in all versions up to, and including, 3.3.75 due to insufficient input sanitization and output escapin…

  heateor Social Sharing Plugin – Sassy Social Share Web / CMS
  Jun 7, 2025
• Medium 6.1
  CVE-2024-11252 Public exploit

  Social Sharing Plugin – Sassy Social Share <= 3.3.69 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter

  The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the heateor_mastodon_share parameter in all versions up to, and including, 3.3.69 due to insufficient input sanitization and output escapin…

  heateor Social Sharing Plugin – Sassy Social Share Web / CMS
  Nov 30, 2024
• Medium 6.1
  CVE-2022-4971 Scanner template EPSS 17%

  Sassy Social Share <= 3.3.3 - Reflected Cross-Site Scripting

  The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter called via the 'heateor_sss_sharing_count' AJAX action in versions up to, and including, 3.3.3 due to insufficient input sanitization and outp…

  heateor Social Sharing Plugin – Sassy Social Share Web / CMS
  Oct 16, 2024
• Medium 5.4
  CVE-2024-32674

  Heateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability. If this vulnerability is …

  heateor Heateor Social Login WordPress Web / CMS
  May 8, 2024
• Medium 6.4
  CVE-2024-1989

  Social Sharing Plugin – Sassy Social Share <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'Sassy_Social_Share' shortcode in all versions up to, and including, 3.3.58 due to insufficient input sanitization and output esc…

  heateor Social Sharing Plugin – Sassy Social Share Web / CMS
  Mar 6, 2024
• Medium 6.4
  CVE-2024-1448

  Sassy Social Share <= 3.3.56 - Authenticated (Contributor+) Stored Cross-Site Scripting

  The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 3.3.56 due to insufficient input sanitization and output escaping on user supp…

  heateor Social Sharing Plugin – Sassy Social Share Web / CMS
  Feb 20, 2024