Ht Plugins vulnerabilities

Products

• Extensions For Cf7 3
• Contact Form 7 3
• Feed 3
• Wishsuite 3
• Mega – Absolute Addons For Wpbakery Page Builder 2

Newest

• ht plugins insert headers and footers code – ht script WordPress Insert Headers and Footers Code – HT Script plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-66474 4.3 MediumJuly 27, 2026
• ht plugins contact form 7 WordPress HT Contact Form 7 plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-42728 7.1 HighMay 27, 2026
• ht plugins extensions for cf7 WordPress Extensions For CF7 plugin <= 3.4.0 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-24991 5.3 MediumFebruary 3, 2026
• ht plugins feed WordPress HT Feed Plugin <= 1.3.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-60147 6.5 MediumSeptember 26, 2025
• ht plugins mega – absolute addons for wpbakery page builder WordPress HT Mega – Absolute Addons for WPBakery Page Builder Plugin <= 1.0.9 - Cross Site Scripting (XSS) Vulnerability CVE-2025-53463 6.5 MediumSeptember 22, 2025
• ht plugins contact form 7 WordPress HT Contact Form 7 plugin <= 2.0.0 - Local File Inclusion Vulnerability CVE-2025-54015 6.6 MediumJuly 16, 2025
• ht plugins mega – absolute addons for wpbakery page builder WordPress HT Mega – Absolute Addons for WPBakery Page Builder plugin <= 1.0.8 - Cross Site Scripting (XSS) Vulnerability CVE-2025-53206 6.5 MediumJune 27, 2025
• ht plugins slider for elementor, htplugins ht slider for elementor +1 more WordPress HT Slider For Elementor plugin <= 1.6.5 - Cross Site Scripting (XSS) Vulnerability CVE-2025-53199 6.5 MediumJune 27, 2025
• ht plugins team member WordPress HT Team Member plugin <= 1.1.7 - Cross Site Scripting (XSS) Vulnerability CVE-2025-49309 6.5 MediumJune 6, 2025
• ht plugins wishsuite WordPress WishSuite plugin <= 1.4.4 - Local File Inclusion Vulnerability CVE-2025-30820 7.5 HighMarch 27, 2025
• ht plugins contact form 7 WordPress Contact Form 7 Widget plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability CVE-2025-24726 6.5 MediumJanuary 24, 2025
• hasthemes extensions for cf7 WordPress Extensions For CF7 Plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerability CVE-2025-24695 4.4 MediumJanuary 24, 2025
• hasthemes ht feed, ht plugins feed +1 more WordPress HT Feed plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability CVE-2024-35699 6.5 MediumJune 8, 2024
• hastheme wishsuite WordPress WishSuite plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability CVE-2024-29927 6.5 MediumMarch 27, 2024
• hasthemes extensions for cf7 WordPress Extensions For CF7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerability CVE-2024-29102 7.1 HighMarch 19, 2024
• hastheme wishsuite WordPress WishSuite Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-23731 4.3 MediumJuly 11, 2023
• hasthemes ht feed, ht plugins feed +1 more WordPress HT Feed Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-23804 4.3 MediumJuly 10, 2023