Plugin icon

Social Sharing Plugin – Sassy Social Share

sassy-social-share

Vulnerabilities:

11

Last Updated:

September 15, 2025

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2025-06-06
Title
Social Sharing Plugin – Sassy Social Share < 3.3.76 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter
Fixed in
Fixed in 3.3.76
CVSS
6.1 (medium)
Published
2025-04-17
Title
Sassy Social Share < 3.3.74 - Open Redirect
Fixed in
Fixed in 3.3.74
CVSS
6.1 (medium)
Published
2024-11-29
Title
Social Sharing Plugin – Sassy Social Share < 3.3.70 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter
Fixed in
Fixed in 3.3.70
CVSS
6.1 (medium)
Published
2024-05-22
Title
Sassy social share < 3.3.63 Admin+ Stored Cross-Site scripting
Fixed in
Fixed in 3.3.63
CVSS
3.5 (low)
Published
2024-04-05
Title
Sassy Social Share < 3.3.61 - Contributor+ Stored XSS
Fixed in
Fixed in 3.3.61
CVSS
5.9 (medium)
Published
2024-03-05
Title
Social Sharing Plugin – Sassy Social Share < 3.3.59 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 3.3.59
CVSS
6.4 (medium)
Published
2024-02-20
Title
Sassy Social Share < 3.3.57 - Contributor+ Stored XSS
Fixed in
Fixed in 3.3.57
CVSS
5.9 (medium)
Published
2022-12-27
Title
Sassy Social Share < 3.3.45 - Contributor+ Stored XSS
Fixed in
Fixed in 3.3.45
CVSS
6.8 (medium)
Published
2022-03-15
Title
Sassy Social Share < 3.3.40 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.3.40
CVSS
6.1 (medium)
Published
2021-10-20
Title
Sassy Social Share 3.3.23 - Missing Access Controls to PHP Object Injection
Fixed in
Fixed in 3.3.24
CVSS
6.3 (medium)
Published
2019-11-17
Title
Sassy Social Share <= 3.3.3 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 3.3.4
CVSS
n/a