Vulnerabilidades em heateor
8 resultadosAnálise Vexday
Heateor apresenta 7 vulnerabilidades documentadas na base do Vexday, todas de severidade baixa a média, com nenhuma sob ataque ativo no momento. A fraqueza predominante é injeção cross-site (CWE-79), típica de aplicações web, mas sem registros de exploração recente ou crítica que exija ação imediata.
CVE-2022-4971MEDIUMSassy Social Share <= 3.3.3 - Reflected Cross-Site ScriptingEPSS 16.2%CVE-2024-11252MEDIUMSocial Sharing Plugin – Sassy Social Share <= 3.3.69 - Reflected Cross-Site Scripting via heateor_mastodon_share ParameterEPSS 0.9%CVE-2024-10020HIGHHeateor Social Login WordPress <= 1.1.35 - Authentication Bypass via Disqus OAuth providerEPSS 0.5%CVE-2024-1989MEDIUMSocial Sharing Plugin – Sassy Social Share <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.5%CVE-2024-1448MEDIUMSassy Social Share <= 3.3.56 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.5%CVE-2024-32674MEDIUMHeateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitraEPSS 0.3%CVE-2025-9857MEDIUMHeateor Login – Social Login Plugin <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-5528MEDIUMSocial Sharing Plugin – Sassy Social Share <= 3.3.75 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' ParameterEPSS 0.2%