Heateor Support

Products

ProductCVEsExploitedLatest
Heateor Social Login2–Jul 2, 2026
Sassy Social Share2–Oct 9, 2026
Fancy Comments WordPress1–Oct 17, 2026

Exploited and recent CVEs

  • CVE-2026-110384 High 7.1 WordPress Fancy Comments WordPress plugin <= 1.2.21 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-94170 High 7.1 WordPress Sassy Social Share plugin <= 3.3.79 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-57751 High 8.1 WordPress Heateor Social Login plugin <= 1.1.39 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2025-68998 Medium 5.4 WordPress Heateor Social Login plugin <= 1.1.39 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-39404 Medium 4.7 WordPress Sassy Social Share plugin <= 3.3.73 - Open Redirection vulnerability 0.3%