Htplugins vulnerabilities

Products

• Ht Contact Form – Drag & Drop Form Builder For Wordpress 6
• Extensions For Cf7 (contact Form 7 Database, Conditional Fields And Redirection) 3
• Ht Slider For Elementor 3
• Insert Headers And Footers Code – Ht Script 3
• Wishsuite – Wishlist For Woocommerce 2

Newest

• htplugins extensions for cf7 (contact form 7 database, conditional fields and redirection) Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.4.5 - Unauthenticated Arbitrary File Upload via Signature Field File Upload CVE-2026-94589 9.8 CriticalOctober 10, 2026
• htplugins ht contact form – drag & drop form builder for wordpress HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Field CVE-2026-96326 7.2 HighSeptember 29, 2026
• htplugins ht contact form – drag & drop form builder for wordpress HT Contact Form <= 2.10.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'form_data' Rich Text Field via Draft Save/Resume CVE-2026-93303 7.2 HighSeptember 25, 2026
• ht plugins insert headers and footers code – ht script WordPress Insert Headers and Footers Code – HT Script plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-66474 4.3 MediumJuly 27, 2026
• htplugins ht contact form – drag & drop form builder for wordpress HT Contact Form <= 2.8.2 - Unauthenticated Stored Cross-Site Scripting via File Upload Field CVE-2026-7052 7.2 HighMay 28, 2026
• htplugins docus – youtube video playlist Docus <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2026-1888 6.4 MediumFebruary 6, 2026
• htplugins wishsuite – wishlist for woocommerce WishSuite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute CVE-2025-13838 6.4 MediumDecember 21, 2025
• htplugins ht slider for elementor HT Slider for Elementor <= 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-14278 6.4 MediumDecember 13, 2025
• htplugins insert headers and footers code – ht script Insert Headers and Footers Code – HT Script <= 1.1.6 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2025-12112 6.4 MediumNovember 8, 2025
• htplugins extensions for cf7 (contact form 7 database, conditional fields and redirection) Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.2.8 - Unauthenticated Arbitrary File Deletion Triggered via Admin Form Submission Deletion CVE-2025-7645 8.1 HighJuly 22, 2025
• hasthemes download contact form 7 widget for elementor page builder \& gutenberg blocks, htplugins ht contact form – drag & drop form builder for wordpress +1 more HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload CVE-2025-7340 Public exploit 9.8 CriticalJuly 15, 2025
• hasthemes download contact form 7 widget for elementor page builder \& gutenberg blocks, htplugins ht contact form – drag & drop form builder for wordpress +1 more HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Move CVE-2025-7360 9.1 CriticalJuly 15, 2025
• hasthemes download contact form 7 widget for elementor page builder \& gutenberg blocks, htplugins ht contact form – drag & drop form builder for wordpress +1 more HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion CVE-2025-7341 9.1 CriticalJuly 15, 2025
• ht plugins slider for elementor, htplugins ht slider for elementor +1 more WordPress HT Slider For Elementor plugin <= 1.6.5 - Cross Site Scripting (XSS) Vulnerability CVE-2025-53199 6.5 MediumJune 27, 2025
• htplugins insert headers and footers code – ht script Insert Headers and Footers Code – HT Script <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update CVE-2025-2779 6.5 MediumApril 2, 2025
• htplugins wp team – wordpress team member plugin HT Team Member <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via htteamember Shortcode CVE-2024-10223 6.4 MediumOctober 30, 2024
• hasthemes ht easy ga4, htplugins ht easy ga4 – google analytics wordpress plugin, hasthemes ht easy ga4 \(google analytics 4\) +2 more HT Easy GA4 – Google Analytics WordPress Plugin <= 1.1.5 - Missing Authorization to Unauthenticated GA4 Email Update CVE-2024-1176 5.3 MediumMarch 13, 2024
• hastheme wishsuite – wishlist for woocommerce, hasthemes wishsuite +1 more WordPress WishSuite Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-32962 5.9 MediumAugust 30, 2023
• hasthemes ht slider for elementor HT Slider For Elementor < 1.4.0 - Arbitrary Plugin Activation via CSRF CVE-2023-0495 4.3 MediumMarch 27, 2023
• hasthemes extensions for cf7, extensions for cf7 (contact form 7 database, conditional fields and redirection) +1 more WordPress Extensions For CF7 Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-23899 4.3 MediumFebruary 17, 2023