https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5528.htmlhttps://patchthecve.com/cve/CVE-2025-5528.htmlWed, 17 Jun 2026 09:48:06 +0000MEDIUM 6.1: The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the heateor_mastodon_share parameter in all versions up to, and including, 3.3.75 due to insufficient input sanitization and output escaping. This makes it possible for unauthentichttps://patchthecve.com/cve/CVE-2024-11252.htmlhttps://patchthecve.com/cve/CVE-2024-11252.htmlWed, 17 Jun 2026 06:57:24 +0000MEDIUM 6.1: The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the heateor_mastodon_share parameter in all versions up to, and including, 3.3.69 due to insufficient input sanitization and output escaping. This makes it possible for unauthentichttps://patchthecve.com/cve/CVE-2022-4971.htmlhttps://patchthecve.com/cve/CVE-2022-4971.htmlWed, 17 Jun 2026 05:22:26 +0000MEDIUM 6.1: The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter called via the 'heateor_sss_sharing_count' AJAX action in versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible for uhttps://patchthecve.com/cve/CVE-2024-4924.htmlhttps://patchthecve.com/cve/CVE-2024-4924.htmlWed, 17 Jun 2026 08:03:12 +0000MEDIUM 6.1: The Social Sharing Plugin WordPress plugin before 3.3.63 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)https://patchthecve.com/cve/CVE-2024-2159.htmlhttps://patchthecve.com/cve/CVE-2024-2159.htmlWed, 17 Jun 2026 07:23:50 +0000MEDIUM 4.7: The Social Sharing Plugin WordPress plugin before 3.3.61 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attackshttps://patchthecve.com/cve/CVE-2024-1989.htmlhttps://patchthecve.com/cve/CVE-2024-1989.htmlWed, 17 Jun 2026 07:05:36 +0000MEDIUM 6.4: The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'Sassy_Social_Share' shortcode in all versions up to, and including, 3.3.58 due to insufficient input sanitization and output escaping on user supplied attributes such ashttps://patchthecve.com/cve/CVE-2024-1448.htmlhttps://patchthecve.com/cve/CVE-2024-1448.htmlWed, 17 Jun 2026 07:04:15 +0000MEDIUM 6.4: The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 3.3.56 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f