Hashthemes vulnerabilities

Products

• Easy Elementor Addons 7
• Hash Elements 5
• Hash Elements 4
• Hash Form 4
• Hash Form 4
• Hash Form – Drag & Drop Form Builder 4
• Total 4
• Demo Importer 2
• Smart Blocks 2

Newest

• hashthemes hash form WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability CVE-2026-81780 Public exploit 10.0 CriticalAugust 31, 2026
• hashthemes hash form WordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerability CVE-2026-78292 9.8 CriticalAugust 27, 2026
• hashthemes hash form WordPress Hash Form plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-78280 4.3 MediumAugust 24, 2026
• hashthemes easy elementor addons WordPress Easy Elementor Addons plugin <= 2.3.7 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-28164 9.6 CriticalAugust 20, 2026
• hashthemes demo importer WordPress HashThemes Demo Importer plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-65483 5.9 MediumJuly 23, 2026
• hashthemes hash elements WordPress Hash Elements plugin <= 1.5.4 - Sensitive Data Exposure vulnerability CVE-2026-24618 4.3 MediumJune 12, 2026
• hashthemes total Total <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in Blog Section Image alt Attribute CVE-2026-5077 5.4 MediumMay 2, 2026
• hashthemes mini ajax cart for woocommerce WordPress Mini Ajax Cart for WooCommerce plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-6370 5.9 MediumApril 15, 2026
• hashthemes easy elementor addons – addons pack for elementor page builder Easy Elementor Addons <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-9045 6.4 MediumOctober 3, 2025
• hashthemes easy elementor addons WordPress Easy Elementor Addons Plugin <= 2.2.8 - Local File Inclusion Vulnerability CVE-2025-58973 7.5 HighSeptember 22, 2025
• hashthemes smart blocks WordPress Smart Blocks Plugin <= 2.4 - Broken Access Control Vulnerability CVE-2025-59561 4.3 MediumSeptember 22, 2025
• hashthemes easy elementor addons WordPress Easy Elementor Addons Plugin <= 2.2.7 - Broken Access Control Vulnerability CVE-2025-54712 4.3 MediumAugust 14, 2025
• hashthemes easy elementor addons WordPress Easy Elementor Addons plugin <= 2.2.6 - Cross Site Scripting (XSS) Vulnerability CVE-2025-54704 6.5 MediumAugust 14, 2025
• hashthemes easy elementor addons WordPress Easy Elementor Addons plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48295 6.5 MediumJuly 16, 2025
• hashthemes hash form WordPress Hash Form plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-47468 4.3 MediumMay 7, 2025
• hashthemes easy elementor addons WordPress Easy Elementor Addons plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability CVE-2025-26912 6.5 MediumFebruary 25, 2025
• hashthemes easy elementor addons WordPress Easy Elementor Addons plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability CVE-2025-26761 6.5 MediumFebruary 16, 2025
• hashthemes hash elements WordPress Hash Elements plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-22296 6.5 MediumJanuary 7, 2025
• hashthemes viral mag WordPress Viral Mag theme <= 1.0.9 - Authenticated Arbitrary Plugin Activation Vulnerability CVE-2023-28990 4.3 MediumDecember 13, 2024
• hashthemes total WordPress Total theme <= 2.1.19 - Authenticated Arbitrary Plugin Activation CVE-2023-27456 4.3 MediumDecember 13, 2024
• hashthemes hash form – drag & drop form builder, hash form +1 more Hash Form <= 1.2.1 - Missing Authorization to Authenticated (Contributor+) Form Style Creation CVE-2024-12201 4.3 MediumDecember 12, 2024
• hashthemes square WordPress Square theme <= 2.0.0 - Broken Access Control CVE-2023-30486 Public exploit 4.3 MediumDecember 9, 2024
• f-secure total F-Secure Total Link Following Local Privilege Escalation Vulnerability CVE-2024-7240 7.3 HighNovember 22, 2024
• hashthemes hash elements Hash Elements <= 1.4.7 - Missing Authorization to Unauthenticated Draft Post Title Exposure CVE-2024-10802 5.3 MediumNovember 13, 2024
• hashthemes smart blocks WordPress Smart Blocks plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-49270 6.5 MediumOctober 16, 2024
• hashthemes hash form – drag & drop form builder, hash form +1 more Hash Form - Drag & Drop Form Builder <= 1.1.9 - Unauthenticated Limited File Upload CVE-2024-9417 6.1 MediumOctober 5, 2024
• hashthemes hash form – drag & drop form builder, hash form +1 more Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated PHP Object Injection CVE-2024-5085 8.1 HighMay 23, 2024
• hashthemes hash form – drag & drop form builder, hash form, drag and drop form builder +2 more Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution CVE-2024-5084 Public exploit EPSS 50.9% 9.8 CriticalMay 23, 2024
• hashthemes hash elements Hash Elements <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter in Multiple Widgets CVE-2024-5177 6.4 MediumMay 23, 2024
• hashthemes hash elements WordPress Hash Elements plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-30426 6.5 MediumMarch 29, 2024
• hashthemes hashone, viral, viral news +2 more Broken Access Control leading to Arbitrary Plugin Activation in multiple HashThemes themes CVE-2023-33923 4.3 MediumMarch 25, 2024
• hashthemes total Total <= 2.1.59 - Missing Authorization to Authenticated (Subscriber+) Sections Update CVE-2024-1771 4.3 MediumMarch 6, 2024
• hashthemes demo importer Hashthemes Demo Importer <= 1.1.1 Improper Access Control Allowing Content Deletion CVE-2021-39333 8.1 HighNovember 1, 2021