heateor vulnerabilities
8 published CVEs name heateor among the affected products.
- 8Published CVEs8 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-9857
Heateor Login – Social Login Plugin <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
heateor · Heateor Login – Social Login Plugin
Medium6.4 - CVE-2025-5528
Social Sharing Plugin – Sassy Social Share <= 3.3.75 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter
heateor · Social Sharing Plugin – Sassy Social Share
Medium6.1 - CVE-2024-11252
Social Sharing Plugin – Sassy Social Share <= 3.3.69 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter
heateor · Social Sharing Plugin – Sassy Social Share
Medium6.1 - CVE-2024-10020
Heateor Social Login WordPress <= 1.1.35 - Authentication Bypass via Disqus OAuth provider
heateor · Heateor Social Login WordPress
High8.1 - CVE-2022-4971
Sassy Social Share <= 3.3.3 - Reflected Cross-Site Scripting
heateor · Social Sharing Plugin – Sassy Social Share
Medium6.1 - CVE-2024-32674
Heateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be…
Heateor · Heateor Social Login WordPress
Medium5.4 - CVE-2024-1989
Social Sharing Plugin – Sassy Social Share <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
heateor · Social Sharing Plugin – Sassy Social Share
Medium6.4 - CVE-2024-1448
Sassy Social Share <= 3.3.56 - Authenticated (Contributor+) Stored Cross-Site Scripting
heateor · Social Sharing Plugin – Sassy Social Share
Medium6.4