heateor vulnerabilities

CVEs per yearBy the year they were published

1. 20246
2. 20252

Newest CVEs

• CVE-2025-9857

  Heateor Login – Social Login Plugin <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

  heateor · Heateor Login – Social Login Plugin

  Medium6.4
• CVE-2025-5528

  Social Sharing Plugin – Sassy Social Share <= 3.3.75 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter

  heateor · Social Sharing Plugin – Sassy Social Share

  Medium6.1
• CVE-2024-11252

  Social Sharing Plugin – Sassy Social Share <= 3.3.69 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter

  heateor · Social Sharing Plugin – Sassy Social Share

  Medium6.1
• CVE-2024-10020

  Heateor Social Login WordPress <= 1.1.35 - Authentication Bypass via Disqus OAuth provider

  heateor · Heateor Social Login WordPress

  High8.1
• CVE-2022-4971

  Sassy Social Share <= 3.3.3 - Reflected Cross-Site Scripting

  heateor · Social Sharing Plugin – Sassy Social Share

  Medium6.1
• CVE-2024-32674

  Heateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be…

  Heateor · Heateor Social Login WordPress

  Medium5.4
• CVE-2024-1989

  Social Sharing Plugin – Sassy Social Share <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  heateor · Social Sharing Plugin – Sassy Social Share

  Medium6.4
• CVE-2024-1448

  Sassy Social Share <= 3.3.56 - Authenticated (Contributor+) Stored Cross-Site Scripting

  heateor · Social Sharing Plugin – Sassy Social Share

  Medium6.4