Skip to content
Noroxi

heateor records

25 published records for vendor heateor.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
48%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 23
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

25 records
  • CVE-2021-39321
    36Monitor

    Sassy Social Share 3.3.23 PHP Object Injection

    HighCVSS 8.8No exploitEPSS 2%

    heateor · sassy social shareOct 21, 2021

  • CVE-2024-9946
    32Monitor

    Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.13.68 - Authentication Bypass via Disqus OAuth provider

    HighCVSS 8.1No exploitEPSS 0%

    heateor · super socializerNov 6, 2024

  • CVE-2024-10020
    32Monitor

    Heateor Social Login WordPress <= 1.1.35 - Authentication Bypass via Disqus OAuth provider

    HighCVSS 8.1No exploitEPSS 0%

    heateor · social loginNov 6, 2024

  • CVE-2022-4971
    29Monitor

    Sassy Social Share <= 3.3.3 - Reflected Cross-Site Scripting

    MediumCVSS 6.1Proof of conceptEPSS 17%

    heateor · sassy social shareOct 16, 2024

  • CVE-2021-24746
    25Monitor

    Sassy Social Share < 3.3.40 - Reflected Cross-Site Scripting

    MediumCVSS 6.1Proof of conceptEPSS 2%

    heateor · sassy social shareMar 28, 2022

  • CVE-2021-24987
    25Monitor

    Super Socializer < 7.13.30 - Reflected Cross-Site Scripting

    MediumCVSS 6.1Proof of conceptEPSS 1%

    heateor · super socializerApr 11, 2022

  • CVE-2024-1448
    25Monitor

    Sassy Social Share <= 3.3.56 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 6.4No exploitEPSS 0%

    heateor · sassy social shareFeb 28, 2024

  • CVE-2024-11252
    24Monitor

    Social Sharing Plugin – Sassy Social Share <= 3.3.69 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter

    MediumCVSS 6.1Proof of conceptEPSS 0%

    heateor · sassy social shareNov 30, 2024

  • CVE-2024-4924
    24Monitor

    Sassy social share < 3.3.63 Admin+ Stored Cross-Site scripting

    MediumCVSS 6.1No exploitEPSS 0%

    heateor · sassy social shareJun 12, 2024

  • CVE-2024-35706
    24Monitor

    WordPress Heateor Social Login WordPress plugin <= 1.1.32 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    heateor · social loginJun 8, 2024

  • CVE-2025-5528
    24Monitor

    Social Sharing Plugin – Sassy Social Share <= 3.3.75 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter

    MediumCVSS 6.1No exploitEPSS 0%

    heateor · sassy social shareJun 7, 2025

  • CVE-2024-1989
    21Monitor

    Social Sharing Plugin – Sassy Social Share <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    heateor · sassy social shareMar 6, 2024

  • CVE-2022-4484
    21Monitor

    Super Socializer < 7.13.44 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    heateor · super socializerJan 16, 2023

  • CVE-2022-4451
    21Monitor

    Sassy Social Share < 3.3.45 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    heateor · sassy social shareJan 16, 2023

  • CVE-2024-13230
    21Monitor

    Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.14 - Unauthenticated Limited SQL Injection via 'SuperSocializerKey'

    MediumCVSS 5.3No exploitEPSS 0%

    heateor · super socializerJan 21, 2025

  • CVE-2023-35882
    21Monitor

    WordPress Super Socializer Plugin <= 7.13.52 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    heateor · super socializerJun 20, 2023

  • CVE-2023-23977
    21Monitor

    WordPress Heateor Social Comments Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    heateor · social commentsApr 4, 2023

  • CVE-2023-23670
    21Monitor

    WordPress Fancy Comments WordPress Plugin <= 1.2.10 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    heateor · fancy commentsMar 30, 2023

  • CVE-2024-32674
    21Monitor

    Heateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability.

    MediumCVSS 5.4No exploitEPSS 0%

    heateor · social loginMay 8, 2024

  • CVE-2024-29804
    21Monitor

    WordPress Fancy Comments WordPress plugin <= 1.2.14 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    heateor · fancy commentsMar 27, 2024

  • CVE-2024-24712
    21Monitor

    WordPress Heateor Social Login Plugin <= 1.1.30 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    heateor · social loginFeb 10, 2024

  • CVE-2024-35707
    21Monitor

    WordPress Heateor Social Login WordPress plugin <= 1.1.32 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    heateor · social loginJun 8, 2024

  • CVE-2024-2836
    19Monitor

    Super Socializer < 7.13.64 - Editor+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    heateor · super socializerApr 15, 2024

  • CVE-2024-2159
    18Monitor

    Sassy Social Share < 3.3.61 - Contributor+ Stored XSS

    MediumCVSS 4.7No exploitEPSS 0%

    heateor · sassy social shareApr 26, 2024

  • CVE-2023-41802
    17Monitor

    WordPress Super Socializer plugin <= 7.13.54 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    heateor · super socializerDec 13, 2024