Filter
-Infinity
0

HasThemes HT Mega WordPressWordPress HT Mega Absolute Addons for Elementor plugin <= 2.2.0 - Unauthenticated Privilege Escalation vulnerability

First published (updated )

HasThemes ShopLentorShopLentor < 2.5.4 - PHP Object Injection

First published (updated )

HT Mega – Absolute Addons For ElementorWordPress HT Mega Plugin <= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

8.8
First published (updated )

Absolute Addons For ElementorPath Traversal

8.8
First published (updated )

HasThemes HT Mega WordPressWordPress HT Mega plugin <= 2.5.7 - JSON Path Traversal vulnerability

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Ht MenuWordPress HT Menu Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

8.8
First published (updated )

Hasthemes JusttablesWordPress JustTables – WooCommerce Product Table Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF)

8.8
First published (updated )

HasTheme WishSuiteWordPress WishSuite Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

8.8
First published (updated )

Hasthemes SwatchlyWordPress Swatchly – WooCommerce Variation Swatches for Products Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

8.8
First published (updated )

Hasthemes Ht FeedWordPress HT Feed Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Hasthemes Woolentor - WooCommerce Elementor Addons + BuilderWordPress WooLentor Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)

8.8
First published (updated )

Google Tag ManagerWordPress Really Simple Google Tag Manager Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

8.8
First published (updated )

Hasthemes Ht Easy Ga4 (Google Analytics 4)WordPress HT Easy GA4 ( Google Analytics 4 ) Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

8.8
First published (updated )

Absolute Addons For ElementorInfoleak

7.5
First published (updated )

Absolute Addons For ElementorHT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

7.2
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

HasThemes CF7 ExtensionsWordPress Extensions For CF7 plugin <= 3.0.6 - Unauthenticated Cross Site Scripting (XSS) vulnerability

7.1
EPSS
0.04%
First published (updated )

Hasthemes Ht Easy Ga4 (Google Analytics 4)WordPress HT Easy GA4 plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

7.1
EPSS
0.04%
First published (updated )

HasThemes WP TemplataWordPress WP Templata plugin <= 1.0.7 - Reflected Cross Site Scripting (XSS) vulnerability

7.1
EPSS
0.03%
First published (updated )

HT Mega - Absolute Addons for Elementor WordPress Page BuilderWordPress HT Mega Plugin <= 2.3.8 is vulnerable to Cross Site Scripting (XSS)

7.1
First published (updated )

HasThemes HT Mega WordPressWordPress HT Mega – Absolute Addons For Elementor plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability

EPSS
0.04%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

HasThemes HT Mega WordPressWordPress HT Mega plugin <= 2.4.7 - Sensitive Data Exposure vulnerability

EPSS
0.04%
First published (updated )

ShopLentorWordPress ShopLentor plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability

EPSS
0.04%
First published (updated )

Hasthemes Ht FeedWordPress HT Feed plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability

First published (updated )

Hasthemes WP EducationWordPress WP Education for Elementor plugin <= 1.2.8 - Stored Cross Site Scripting (XSS) vulnerability

EPSS
0.03%
First published (updated )

Hasthemes Ht BuilderWordPress HT Builder – WordPress Theme Builder for Elementor plugin <= 1.3.0 - Stored Cross Site Scripting (XSS) vulnerability

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

HasThemes Free WooCommerce Theme 99fy ExtensionWordPress Free WooCommerce Theme 99fy Extension plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability

EPSS
0.04%
First published (updated )

Hasthemes WP NewsWP News <= 1.1.9 - Arbitrary Plugin Activation via CSRF

First published (updated )

Hasthemes WP Film StudioWP Film Studio < 1.3.5 - Arbitrary Plugin Activation via CSRF

First published (updated )

Hasthemes WP InsuranceWP Insurance < 2.1.4 - Arbitrary Plugin Activation via CSRF

First published (updated )

Absolute Addons For ElementorXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203