What’s Vulnerable › Products
heateor Social Sharing Plugin – Sassy Social Share vulnerabilities
10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your heateor Social Sharing Plugin – Sassy Social Share version is affected
Latest heateor Social Sharing Plugin – Sassy Social Share vulnerabilities
- CVE-2025-5528 — Social Sharing Plugin – Sassy Social Share <= 3.3.75 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter (CVSS 6.1)
- CVE-2024-11252 — Social Sharing Plugin – Sassy Social Share <= 3.3.69 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter (CVSS 6.1)
- CVE-2022-4971 — Sassy Social Share <= 3.3.3 - Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2024-4924 — Sassy social share < 3.3.63 Admin+ Stored Cross-Site scripting (CVSS 6.1)
- CVE-2024-2159 — Sassy Social Share < 3.3.61 - Contributor+ Stored XSS (CVSS 4.7)
- CVE-2024-1989 — Social Sharing Plugin – Sassy Social Share <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
- CVE-2024-1448 — Sassy Social Share <= 3.3.56 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- CVE-2022-4451 — Sassy Social Share < 3.3.45 - Contributor+ Stored XSS (CVSS 5.4)
- CVE-2021-24746 — Sassy Social Share < 3.3.40 - Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2021-39321 — Sassy Social Share 3.3.23 PHP Object Injection (CVSS 6.5)