VendorsHeateorsassy_social_shareall versions
Vulnerabilities

Heateor Sassy Social Share

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2021-39321
Sassy Social Share 3.3.23 PHP Object Injection
Published 2021-10-21 · Modified
8.8EPSS 0.020
CVE-2024-1989
Social Sharing Plugin – Sassy Social Share <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2024-03-06 · Modified
6.4EPSS 0.005
CVE-2024-1448
Sassy Social Share <= 3.3.56 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-02-20 · Modified
6.4EPSS 0.005
CVE-2022-4971
Sassy Social Share <= 3.3.3 - Reflected Cross-Site Scripting
Published 2024-10-16 · Analyzed
6.1EPSS 0.173
CVE-2021-24746
Sassy Social Share < 3.3.40 - Reflected Cross-Site Scripting
Published 2022-03-28 · Modified
6.1EPSS 0.022
CVE-2024-11252
Social Sharing Plugin – Sassy Social Share <= 3.3.69 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter
Published 2024-11-30 · Analyzed
6.1EPSS 0.009
CVE-2024-4924
Sassy social share < 3.3.63 Admin+ Stored Cross-Site scripting
Published 2024-06-12 · Analyzed
6.1EPSS 0.005
CVE-2025-5528
Social Sharing Plugin – Sassy Social Share <= 3.3.75 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter
Published 2025-06-07 · Analyzed
6.1EPSS 0.002
CVE-2022-4451
Sassy Social Share < 3.3.45 - Contributor+ Stored XSS
Published 2023-01-16 · Modified
5.4EPSS 0.005
CVE-2024-2159
Sassy Social Share < 3.3.61 - Contributor+ Stored XSS
Published 2024-04-26 · Analyzed
4.7EPSS 0.005