İçeriğe atla
Noroxi

heateor kayıtları

heateor üreticisine ait 25 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%48
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21
  2. 22
  3. 23
  4. 24
  5. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

25 kayıt
  • CVE-2021-39321
    36İzleyin

    Sassy Social Share 3.3.23 PHP Object Injection

    YüksekCVSS 8,8İstismar yokEPSS %2

    heateor · sassy social share21 Eki 2021

  • CVE-2024-9946
    32İzleyin

    Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.13.68 - Authentication Bypass via Disqus OAuth provider

    YüksekCVSS 8,1İstismar yokEPSS %0

    heateor · super socializer6 Kas 2024

  • CVE-2024-10020
    32İzleyin

    Heateor Social Login WordPress <= 1.1.35 - Authentication Bypass via Disqus OAuth provider

    YüksekCVSS 8,1İstismar yokEPSS %0

    heateor · social login6 Kas 2024

  • CVE-2022-4971
    29İzleyin

    Sassy Social Share <= 3.3.3 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %17

    heateor · sassy social share16 Eki 2024

  • CVE-2021-24746
    25İzleyin

    Sassy Social Share < 3.3.40 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    heateor · sassy social share28 Mar 2022

  • CVE-2021-24987
    25İzleyin

    Super Socializer < 7.13.30 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    heateor · super socializer11 Nis 2022

  • CVE-2024-1448
    25İzleyin

    Sassy Social Share <= 3.3.56 - Authenticated (Contributor+) Stored Cross-Site Scripting

    OrtaCVSS 6,4İstismar yokEPSS %0

    heateor · sassy social share28 Şub 2024

  • CVE-2024-11252
    24İzleyin

    Social Sharing Plugin – Sassy Social Share <= 3.3.69 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    heateor · sassy social share30 Kas 2024

  • CVE-2024-4924
    24İzleyin

    Sassy social share < 3.3.63 Admin+ Stored Cross-Site scripting

    OrtaCVSS 6,1İstismar yokEPSS %0

    heateor · sassy social share12 Haz 2024

  • CVE-2024-35706
    24İzleyin

    WordPress Heateor Social Login WordPress plugin <= 1.1.32 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %0

    heateor · social login8 Haz 2024

  • CVE-2025-5528
    24İzleyin

    Social Sharing Plugin – Sassy Social Share <= 3.3.75 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter

    OrtaCVSS 6,1İstismar yokEPSS %0

    heateor · sassy social share7 Haz 2025

  • CVE-2024-1989
    21İzleyin

    Social Sharing Plugin – Sassy Social Share <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    heateor · sassy social share6 Mar 2024

  • CVE-2022-4484
    21İzleyin

    Super Socializer < 7.13.44 - Contributor+ Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %0

    heateor · super socializer16 Oca 2023

  • CVE-2022-4451
    21İzleyin

    Sassy Social Share < 3.3.45 - Contributor+ Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %0

    heateor · sassy social share16 Oca 2023

  • CVE-2024-13230
    21İzleyin

    Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.14 - Unauthenticated Limited SQL Injection via 'SuperSocializerKey'

    OrtaCVSS 5,3İstismar yokEPSS %0

    heateor · super socializer21 Oca 2025

  • CVE-2023-35882
    21İzleyin

    WordPress Super Socializer Plugin <= 7.13.52 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    heateor · super socializer20 Haz 2023

  • CVE-2023-23977
    21İzleyin

    WordPress Heateor Social Comments Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    heateor · social comments4 Nis 2023

  • CVE-2023-23670
    21İzleyin

    WordPress Fancy Comments WordPress Plugin <= 1.2.10 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    heateor · fancy comments30 Mar 2023

  • CVE-2024-32674
    21İzleyin

    Heateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability.

    OrtaCVSS 5,4İstismar yokEPSS %0

    heateor · social login8 May 2024

  • CVE-2024-29804
    21İzleyin

    WordPress Fancy Comments WordPress plugin <= 1.2.14 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    heateor · fancy comments27 Mar 2024

  • CVE-2024-24712
    21İzleyin

    WordPress Heateor Social Login Plugin <= 1.1.30 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    heateor · social login10 Şub 2024

  • CVE-2024-35707
    21İzleyin

    WordPress Heateor Social Login WordPress plugin <= 1.1.32 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    heateor · social login8 Haz 2024

  • CVE-2024-2836
    19İzleyin

    Super Socializer < 7.13.64 - Editor+ Stored XSS

    OrtaCVSS 4,8İstismar yokEPSS %0

    heateor · super socializer15 Nis 2024

  • CVE-2024-2159
    18İzleyin

    Sassy Social Share < 3.3.61 - Contributor+ Stored XSS

    OrtaCVSS 4,7İstismar yokEPSS %0

    heateor · sassy social share26 Nis 2024

  • CVE-2023-41802
    17İzleyin

    WordPress Super Socializer plugin <= 7.13.54 - Broken Access Control vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %0

    heateor · super socializer13 Ara 2024