Skip to contentHasthemes vulnerabilities
Newest
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_productsCVE-2023-62147.5 High
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega – Absolute Addons For Elementor <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQCVE-2024-27906.4 Medium
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid WidgetCVE-2024-33086.4 Medium
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size'CVE-2024-20856.4 Medium
- devitems ht megaWordPress HT Mega plugin <= 2.4.7 - Sensitive Data Exposure vulnerabilityCVE-2024-327824.3 Medium
- hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin, hasthemes woolentor-addons +2 moreShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-10576.4 Medium
- hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 moreShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.4 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code WidgetCVE-2024-29466.4 Medium
- hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 moreShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner LinkCVE-2024-19606.4 Medium
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder, hasthemes ht mega - absolute addons for elementor page builder +2 moreHT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory TraversalCVE-2024-19748.8 High
- hasthemes shoplentor, devitemsllc shoplentor – all-in-one woocommerce growth & store enhancement plugin +1 moreShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal P…CVE-2024-28686.4 Medium
- devitems ht megaWordPress HT Mega – Absolute Addons For Elementor plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-301826.5 Medium
- hastheme wishsuiteWordPress WishSuite plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-299276.5 Medium
- hasthemes wc builderWordPress WC Builder plugin <= 1.0.18 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-299266.5 Medium
- hasthemes ht easy ga4 ( google analytics 4 ), ht easy ga4 \(google analytics 4\) +1 moreWordPress HT Easy GA4 plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-290947.1 High
- hasthemes extensions for cf7WordPress Extensions For CF7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerabilityCVE-2024-291027.1 High
- hasthemes ht easy ga4, htplugins ht easy ga4 – google analytics wordpress plugin, hasthemes ht easy ga4 \(google analytics 4\) +2 moreHT Easy GA4 – Google Analytics WordPress Plugin <= 1.1.5 - Missing Authorization to Unauthenticated GA4 Email UpdateCVE-2024-11765.3 Medium
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega – Absolute Addons For Elementor <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel WidgetCVE-2024-14216.4 Medium
- hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 moreHT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTagCVE-2024-13976.4 Medium
- devitemsllc ht mega – absolute addons for elementor, hasthemes ht mega +1 moreWordPress HT Mega Plugin <= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-515294.3 Medium
- devitemsllc ht mega – absolute addons for elementor, hasthemes ht mega +1 moreWordPress HT Mega Plugin <= 2.3.8 is vulnerable to Cross Site Scripting (XSS)CVE-2023-509017.1 High
- hasthemes hashbar, hashbar – wordpress notification bar +1 moreWordPress HashBar – WordPress Notification Bar Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-513725.9 Medium
- hastheme wishsuite – wishlist for woocommerce, hasthemes wishsuite +1 moreWordPress WishSuite Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)CVE-2023-329625.9 Medium
- hastech shoplentor, hasthemes woolentor - woocommerce elementor addons \+ builder +1 moreWordPress WooLentor Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2022-471724.3 Medium
- hastheme wishsuiteWordPress WishSuite Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-237314.3 Medium
- hasthemes ht menuWordPress HT Menu Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-237914.3 Medium
- hasthemes justtablesWordPress JustTables – WooCommerce Product Table Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-238034.3 Medium
- hasthemes swatchlyWordPress Swatchly – WooCommerce Variation Swatches for Products Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-237924.3 Medium
- hasthemes ht feed, ht plugins feed +1 moreWordPress HT Feed Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-238044.3 Medium
- hasthemes ht easy ga4 ( google analytics 4 ), ht easy ga4 \(google analytics 4\) +1 moreWordPress HT Easy GA4 ( Google Analytics 4 ) Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-238024.3 Medium
- hasthemes really simple google tag managerWordPress Really Simple Google Tag Manager Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-238014.3 Medium
- hasthemes wc sales notificationWC Sales Notification < 1.2.3 - Arbitrary Plugin Activation via CSRFCVE-2023-10874.3 Medium
- hasthemes ht portfolioHT Portfolio < 1.1.6 - Arbitrary Plugin Activation via CSRFCVE-2023-04974.3 Medium
- hastech ht eventHT Event < 1.4.6 - Arbitrary Plugin Activation via CSRFCVE-2023-04964.3 Medium
- hasthemes preview link generatorPreview Link Generator < 1.0.4 - Arbitrary Plugin Activation via CSRFCVE-2023-10864.3 Medium
- hasthemes wp insuranceWP Insurance < 2.1.4 - Arbitrary Plugin Activation via CSRFCVE-2023-05016.5 Medium
- hasthemes free woocommerce theme 99fy extensionFree WooCommerce Theme 99fy Extension < 1.2.8 - Arbitrary Plugin Activation via CSRFCVE-2023-05034.3 Medium
- hasthemes wp film studioWP Film Studio < 1.3.5 - Arbitrary Plugin Activation via CSRFCVE-2023-05006.5 Medium
- hasthemes wp newsWP News <= 1.1.9 - Arbitrary Plugin Activation via CSRFCVE-2023-05026.5 Medium
- unknown contact form 7 widget for elementor page builder & gutenberg blocks, hasthemes contact form 7 widget for elementor page builder \& gutenberg blocks +1 moreContact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks < 1.1.6 - Arbitrary Plugin Activation via CSRFCVE-2023-04844.3 Medium
- hasthemes ht slider for elementorHT Slider For Elementor < 1.4.0 - Arbitrary Plugin Activation via CSRFCVE-2023-04954.3 Medium
- hasthemes ever compareEver Compare <= 1.2.3 - Arbitrary Plugin Activation via CSRFCVE-2023-05054.3 Medium
- hasthemes quickswishQuickSwish < 1.1.0 - Arbitrary Plugin Activation via CSRFCVE-2023-04994.3 Medium
- hasthemes coupon zenCoupon Zen < 1.0.6 - Arbitrary Plugin Activation via CSRFCVE-2023-10894.3 Medium
- hasthemes wp plugin managerWP Plugin Manager < 1.1.8 - Arbitrary Plugin Activation via CSRFCVE-2023-10884.3 Medium
- hasthemes wp educationWP Education < 1.2.7 - Arbitrary Plugin Activation via CSRFCVE-2023-04984.3 Medium
- hasthemes ht politicHT Politic < 2.3.8 - Arbitrary Plugin Activation via CSRFCVE-2023-05044.3 Medium
- hastech shoplentor, hasthemes woolentor - woocommerce elementor addons \+ builder +1 moreWordPress WooLentor Plugin <= 2.5.1 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2022-467985.4 Medium
- hastech shoplentorShopLentor < 2.5.4 - PHP Object InjectionCVE-2023-02329.8 Critical
- hastech shoplentorShopLentor < 2.5.4 - Contributor+ Stored XSSCVE-2023-02315.4 Medium
- hasthemes extensions for cf7, extensions for cf7 (contact form 7 database, conditional fields and redirection) +1 moreWordPress Extensions For CF7 Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-238994.3 Medium
- Show moreLoading…