High
CVE-2026-94170
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 12
Reset filters
Medium
CVE-2025-5528
Social Sharing Plugin – Sassy Social Share <= 3.3.75 - Reflected Cross-Site Scripting via 'heateor_mastodon_share' Parameter
Medium
CVE-2025-39404
Sassy Social Share <= 3.3.73 - Open Redirect
Medium
CVE-2024-11252
Social Sharing Plugin – Sassy Social Share <= 3.3.69 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter
Medium
CVE-2024-4924
Sassy Social Share <= 3.3.62 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-2159
Sassy Social Share <= 3.3.60 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1989
Social Sharing Plugin – Sassy Social Share <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1448
Sassy Social Share <= 3.3.56 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4451
Sassy Social Share <= 3.3.44 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4971
Sassy Social Share <= 3.3.3 - Reflected Cross-Site Scripting
Medium
CVE-2021-24746
Sassy Social Share <= 3.3.39 - Reflected Cross-Site Scripting
High
CVE-2021-39321
Sassy Social Share 3.3.23 - Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.