Heateor vulnerabilities

Products

• Sassy Social Share 10
• Super Socializer 7
• Social Sharing Plugin – Sassy Social Share 6
• Social Login 5
• Social Login Wordpress 3
• Fancy Comments 2

Newest

• heateor login – social login plugin Heateor Login – Social Login Plugin <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-9857 6.4 MediumSeptember 10, 2025
• heateor sassy social share, social sharing plugin – sassy social share +1 more Social Sharing Plugin – Sassy Social Share <= 3.3.75 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter CVE-2025-5528 6.1 MediumJune 7, 2025
• heateor super socializer, the champ social share, social login and social comments plugin – super socializer +1 more Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.14 - Unauthenticated Limited SQL Injection via 'SuperSocializerKey' CVE-2024-13230 5.3 MediumJanuary 21, 2025
• heateor super socializer WordPress Super Socializer plugin <= 7.13.54 - Broken Access Control vulnerability CVE-2023-41802 4.3 MediumDecember 13, 2024
• heateor sassy social share, social sharing plugin – sassy social share +1 more Social Sharing Plugin – Sassy Social Share <= 3.3.69 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter CVE-2024-11252 Public exploit 6.1 MediumNovember 30, 2024
• heateor super socializer, the champ social share, social login and social comments plugin – super socializer +1 more Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.13.68 - Authentication Bypass via Disqus OAuth provider CVE-2024-9946 8.1 HighNovember 6, 2024
• heateor social login wordpress, social login +1 more Heateor Social Login WordPress <= 1.1.35 - Authentication Bypass via Disqus OAuth provider CVE-2024-10020 8.1 HighNovember 6, 2024
• heateor sassy social share, social sharing plugin – sassy social share +1 more Sassy Social Share <= 3.3.3 - Reflected Cross-Site Scripting CVE-2022-4971 EPSS 17.3% 6.1 MediumOctober 16, 2024
• heateor sassy social share, social rocket sharing plugin, unknown social sharing plugin +2 more Sassy social share < 3.3.63 Admin+ Stored Cross-Site scripting CVE-2024-4924 6.1 MediumJune 12, 2024
• heateor social login, team heateor heateor social login +1 more WordPress Heateor Social Login WordPress plugin <= 1.1.32 - Cross Site Scripting (XSS) vulnerability CVE-2024-35706 7.1 HighJune 8, 2024
• heateor social login, team heateor heateor social login +1 more WordPress Heateor Social Login WordPress plugin <= 1.1.32 - Cross Site Scripting (XSS) vulnerability CVE-2024-35707 6.5 MediumJune 8, 2024
• bestwebsoft social login, heateor social login wordpress +1 more Heateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability. If... CVE-2024-32674 5.4 MediumMay 8, 2024
• heateor sassy social share, social rocket sharing plugin, unknown social sharing plugin +2 more Sassy Social Share < 3.3.61 - Contributor+ Stored XSS CVE-2024-2159 4.7 MediumApril 26, 2024
• heateor super socializer, unknown social share, social login and social comments plugin +1 more Super Socializer < 7.13.64 - Editor+ Stored XSS CVE-2024-2836 4.8 MediumApril 15, 2024
• heateor fancy comments, team heateor fancy comments wordpress +1 more WordPress Fancy Comments WordPress plugin <= 1.2.14 - Cross Site Scripting (XSS) vulnerability CVE-2024-29804 6.5 MediumMarch 27, 2024
• heateor sassy social share, social sharing plugin – sassy social share +1 more Social Sharing Plugin – Sassy Social Share <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-1989 6.4 MediumMarch 6, 2024
• heateor sassy social share, social sharing plugin – sassy social share +1 more Sassy Social Share <= 3.3.56 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1448 6.4 MediumFebruary 20, 2024
• heateor social login wordpress, social login, team heateor heateor social login wordpress +2 more WordPress Heateor Social Login Plugin <= 1.1.30 is vulnerable to Cross Site Scripting (XSS) CVE-2024-24712 6.5 MediumFebruary 10, 2024
• heateor super socializer WordPress Super Socializer Plugin <= 7.13.52 is vulnerable to Cross Site Scripting (XSS) CVE-2023-35882 6.5 MediumJune 20, 2023
• heateor social comments, team heateor wordpress social comments plugin for vkontakte comments and disqus comments +1 more WordPress Heateor Social Comments Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23977 6.5 MediumApril 4, 2023
• heateor fancy comments, team heateor fancy comments wordpress +1 more WordPress Fancy Comments WordPress Plugin <= 1.2.10 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23670 6.5 MediumMarch 30, 2023
• heateor super socializer, unknown social share, social login and social comments plugin +1 more Super Socializer < 7.13.44 - Contributor+ Stored XSS CVE-2022-4484 5.4 MediumJanuary 16, 2023
• heateor sassy social share, social rocket sharing plugin, unknown social sharing plugin +2 more Sassy Social Share < 3.3.45 - Contributor+ Stored XSS CVE-2022-4451 5.4 MediumJanuary 16, 2023
• heateor super socializer, the champ social share, social login and social comments plugin – super socializer +1 more Super Socializer < 7.13.30 - Reflected Cross-Site Scripting CVE-2021-24987 6.1 MediumApril 11, 2022
• heateor sassy social share, social sharing plugin – sassy social share +1 more Sassy Social Share < 3.3.40 - Reflected Cross-Site Scripting CVE-2021-24746 6.1 MediumMarch 28, 2022
• heateor sassy social share, sassy social share social share +1 more Sassy Social Share 3.3.23 PHP Object Injection CVE-2021-39321 8.8 HighOctober 21, 2021