Skip to content
Hastech vulnerabilities
Newest
-
devitems shoplentor
WordPress ShopLentor Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58990
6.5 Medium
-
devitems ht mega
WordPress HT Mega Plugin plugin <= 2.9.0 - Broken Access Control Vulnerability
CVE-2025-54695
5.4 Medium
-
devitems ht event
WordPress HT Event – WordPress Event Manager Plugin for Elementor Plugin <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24624
7.1 High
-
devitems ht mega
WordPress HT Mega plugin <= 2.5.7 - JSON Path Traversal vulnerability
CVE-2024-38706
6.5 Medium
-
hastech shoplentor
WordPress ShopLentor plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability
CVE-2024-34767
6.5 Medium
-
hastech ht mega, hasthemes ht mega - absolute addons for elementor page builder +1 more
WordPress HT Mega Absolute Addons for Elementor plugin <= 2.2.0 - Unauthenticated Privilege Escalation vulnerability
CVE-2023-37999
9.8 Critical
-
devitems ht mega
WordPress HT Mega plugin <= 2.4.7 - Sensitive Data Exposure vulnerability
CVE-2024-32782
4.3 Medium
-
devitems ht mega
WordPress HT Mega – Absolute Addons For Elementor plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability
CVE-2024-30182
6.5 Medium
-
hastech shoplentor, hasthemes woolentor - woocommerce elementor addons \+ builder +1 more
WordPress WooLentor Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2022-47172
4.3 Medium
-
hastech ht event
HT Event < 1.4.6 - Arbitrary Plugin Activation via CSRF
CVE-2023-0496
4.3 Medium
-
hastech shoplentor, hasthemes woolentor - woocommerce elementor addons \+ builder +1 more
WordPress WooLentor Plugin <= 2.5.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2022-46798
5.4 Medium
-
hastech shoplentor
ShopLentor < 2.5.4 - PHP Object Injection
CVE-2023-0232
9.8 Critical
-
hastech shoplentor
ShopLentor < 2.5.4 - Contributor+ Stored XSS
CVE-2023-0231
5.4 Medium