Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Heateor Support Clear all filters
TI-2026-76045 CVE-2026-110384 · GHSA-qxf9-c2vg-fxr7

Cross-site scripting in Fancy Comments WordPress plugin

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Heateor Support Fancy Comments WordPress fancy-facebook-comments allows Reflected XSS.This issue affects Fancy Comment…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00188 Published 2026-10-17 No fix listed CWE-79
TI-2026-69920 CVE-2026-94170 · GHSA-fqcf-cvhf-79pw

WordPress Sassy Social Share plugin Cross Site Scripting (XSS)

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Heateor Support Sassy Social Share sassy-social-share allows Reflected XSS.This issue affects Sassy Social Share: from…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-10-09 No fix listed CWE-79
TI-2025-26146 CVE-2025-39404 · GHSA-vrg4-hqcw-hjvg

WordPress Sassy Social Share plugin <= 3.3.73 - Open Redirection vulnerability

Priority LOW 22

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Heateor Support Sassy Social Share sassy-social-share allows Phishing.This issue affects Sassy Social Share: from n/a through <= 3.3.73.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00328 Published 2025-04-24 No fix listed CWE-601