hasthemes Vulnerability Advisory Catalog

Total 96 security vulnerabilities recorded for hasthemes software and firmware.

← Back to All Vendors
Component: wc_builder

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes WC Builder wc-builder allows Stored XS...

๐Ÿ“… 2025-12-24
CVSS 6.5 Dossier →
Component: wp_plugin_manager

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes WP Plugin Manager wp-plugin-manager allows Cross Site Request Forgery.This issue affects ...

๐Ÿ“… 2025-11-13
CVSS 4.3 Dossier →
CVE-2025-12493 CRITICAL
Component: shoplentor

The ShopLentor โ€“ WooCommerce Builder for Elementor & Gutenberg +21 Modules โ€“ All in One Solution (formerly WooLentor) plugin for WordPress is vulnerab...

๐Ÿ“… 2025-11-04
CVSS 9.8 Dossier →
Component: shoplentor

The ShopLentor โ€“ WooCommerce Builder for Elementor & Gutenberg +21 Modules โ€“ All in One Solution plugin for WordPress is vulnerable to Stored Cross-Si...

๐Ÿ“… 2025-10-25
CVSS 6.4 Dossier →
Component: shoplentor

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems ShopLentor woolentor-addons allows Stor...

๐Ÿ“… 2025-09-09
CVSS 6.5 Dossier →
CVE-2025-8401 MEDIUM
Component: ht_mega

The HT Mega โ€“ Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,...

๐Ÿ“… 2025-07-31
CVSS 4.3 Dossier →
CVE-2025-8151 MEDIUM
Component: ht_mega

The HT Mega โ€“ Absolute Addons For Elementor plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.9.1 via the '...

๐Ÿ“… 2025-07-31
CVSS 4.3 Dossier →
CVE-2025-8068 MEDIUM
Component: ht_mega

The HT Mega โ€“ Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification and loss of data due to an improper capabi...

๐Ÿ“… 2025-07-31
CVSS 4.3 Dossier →
CVE-2025-7360 CRITICAL
Component: download_contact_form_7_widget_for_elementor_page_builder_\&_gutenberg_blocks

The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file moving du...

๐Ÿ“… 2025-07-15
CVSS 9.1 Dossier →
CVE-2025-7341 CRITICAL
Component: download_contact_form_7_widget_for_elementor_page_builder_\&_gutenberg_blocks

The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file deletion ...

๐Ÿ“… 2025-07-15
CVSS 9.1 Dossier →
CVE-2025-7340 CRITICAL
Component: download_contact_form_7_widget_for_elementor_page_builder_\&_gutenberg_blocks

The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerable to arbitrary file uploads d...

๐Ÿ“… 2025-07-15
CVSS 9.8 Dossier →
CVE-2025-3775 MEDIUM
Component: shoplentor

The ShopLentor โ€“ WooCommerce Builder for Elementor & Gutenberg +20 Modules โ€“ All in One Solution (formerly WooLentor) plugin for WordPress is vulnerab...

๐Ÿ“… 2025-04-25
CVSS 6.5 Dossier →
CVE-2025-1802 MEDIUM
Component: ht_mega

The HT Mega โ€“ Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the โ€˜marker_titleโ€™, 'notification_co...

๐Ÿ“… 2025-03-20
CVSS 6.4 Dossier →
CVE-2025-1527 MEDIUM
Component: shoplentor

The ShopLentor โ€“ WooCommerce Builder for Elementor & Gutenberg +20 Modules โ€“ All in One Solution (formerly WooLentor) plugin for WordPress is vulnerab...

๐Ÿ“… 2025-03-12
CVSS 6.4 Dossier →
CVE-2025-1261 MEDIUM
Component: ht_mega

The HT Mega โ€“ Absolute Addons For Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the plugin's Countdown wid...

๐Ÿ“… 2025-03-08
CVSS 6.4 Dossier →
Component: wp_templata

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes WP Templata wptemplata allows Reflecte...

๐Ÿ“… 2025-03-03
CVSS 7.1 Dossier →
Component: ht_mega

The HT Mega โ€“ Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all...

๐Ÿ“… 2025-02-11
CVSS 6.4 Dossier →
Component: ht_mega

The HT Mega โ€“ Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'block_css' and 'inner_css' para...

๐Ÿ“… 2025-02-04
CVSS 6.4 Dossier →
Component: extensions_for_cf7

Server-Side Request Forgery (SSRF) vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Server Side Request Forgery.This issue aff...

๐Ÿ“… 2025-01-24
CVSS 4.4 Dossier →
Component: ht_politic

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems HT Politic wp-politic allows DOM-Based ...

๐Ÿ“… 2024-11-09
CVSS 6.5 Dossier →
Component: ht_builder

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Builder โ€“ WordPress Theme Builder f...

๐Ÿ“… 2024-11-04
CVSS 6.5 Dossier →
Component: wp_education

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems WP Education wp-education allows Stored...

๐Ÿ“… 2024-10-20
CVSS 6.5 Dossier →
CVE-2024-9538 MEDIUM
Component: shoplentor

The ShopLentor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.8 via the 'render' funct...

๐Ÿ“… 2024-10-11
CVSS 4.3 Dossier →
CVE-2024-8910 MEDIUM
Component: ht_mega

The HT Mega โ€“ Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,...

๐Ÿ“… 2024-09-25
CVSS 4.3 Dossier →
Page 1 of 4 (96 Total Records)