PatchTheCVEheateor vulnerabilities
Recent CVEs affecting heateor products. 13 tracked.
heateor has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 13. Most recent: 2025-06-07. Highest priority: CVE-2022-4971 (score 51/100).
- CVE-2025-5528 MEDIUM 6.1 UPGRADE The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scri
- CVE-2024-9946 HIGH 8.1 UPGRADE The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerabl
- CVE-2024-4924 MEDIUM 6.1 UPGRADE The Social Sharing Plugin WordPress plugin before 3.3.63 does not sanitise and escape some of its settings, w
- CVE-2024-35707 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in T
- CVE-2024-35706 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in T
- CVE-2024-32674 MEDIUM 5.4 UPGRADE Heateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability
- CVE-2024-2836 MEDIUM 4.8 UPGRADE The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.64 does not sanitise a
- CVE-2024-2159 MEDIUM 4.7 UPGRADE The Social Sharing Plugin WordPress plugin before 3.3.61 does not validate and escape some of its shortcode a
- CVE-2024-13230 MEDIUM 5.3 UPGRADE The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerabl
- CVE-2024-11252 MEDIUM 6.1 UPGRADE The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scri
- CVE-2024-10020 HIGH 8.1 UPGRADE The Heateor Social Login WordPress plugin for WordPress is vulnerable to authentication bypass in all versions
- CVE-2023-41802 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Team Heateor Super Socializer allows Exploiting Incorrectly Configured
- CVE-2022-4971 MEDIUM 6.1 UPGRADE The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' par
FAQ
How do I fix heateor vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is heateor being exploited right now?
None of the tracked heateor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which heateor CVE should I patch first?
CVE-2022-4971 currently ranks highest (51/100): The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' par.