hasthemes Vulnerability Advisory Catalog

Total 96 security vulnerabilities recorded for hasthemes software and firmware.

← Back to All Vendors
CVE-2024-1057 MEDIUM
Component: shoplentor

The ShopLentor โ€“ WooCommerce Builder for Elementor & Gutenberg +10 Modules โ€“ All in One Solution (formerly WooLentor) plugin for WordPress is vulnerab...

๐Ÿ“… 2024-04-20
CVSS 6.4 Dossier →
CVE-2024-2946 MEDIUM
Component: shoplentor

The ShopLentor โ€“ WooCommerce Builder for Elementor & Gutenberg +12 Modules โ€“ All in One Solution (formerly WooLentor) plugin for WordPress is vulnerab...

๐Ÿ“… 2024-04-09
CVSS 6.4 Dossier →
Component: ht_mega

The HT Mega โ€“ Absolute Addons For Elementor plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.6 via ...

๐Ÿ“… 2024-04-09
CVSS 8.8 Dossier →
CVE-2024-1960 MEDIUM
Component: shoplentor

The ShopLentor โ€“ WooCommerce Builder for Elementor & Gutenberg +12 Modules โ€“ All in One Solution (formerly WooLentor) plugin for WordPress is vulnerab...

๐Ÿ“… 2024-04-09
CVSS 6.4 Dossier →
CVE-2024-2868 MEDIUM
Component: shoplentor

The ShopLentor โ€“ WooCommerce Builder for Elementor & Gutenberg +12 Modules โ€“ All in One Solution (formerly WooLentor) plugin for WordPress is vulnerab...

๐Ÿ“… 2024-04-04
CVSS 6.4 Dossier →
Component: ht_mega

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems HT Mega ht-mega-for-elementor.This issu...

๐Ÿ“… 2024-03-27
CVSS 6.5 Dossier →
Component: wishsuite

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasTheme WishSuite allows Stored XSS.This issue ...

๐Ÿ“… 2024-03-27
CVSS 6.5 Dossier →
Component: wc_builder

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes WC Builder allows Stored XSS.This issu...

๐Ÿ“… 2024-03-27
CVSS 6.5 Dossier →
Component: ht_easy_ga4_\(google_analytics_4\)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Easy GA4 ( Google Analytics 4 ) all...

๐Ÿ“… 2024-03-19
CVSS 7.1 Dossier →
Component: extensions_for_cf7

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes Extensions For CF7 allows Stored XSS.T...

๐Ÿ“… 2024-03-19
CVSS 7.1 Dossier →
CVE-2024-1176 MEDIUM
Component: ht_easy_ga4

The HT Easy GA4 โ€“ Google Analytics WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit...

๐Ÿ“… 2024-03-13
CVSS 5.3 Dossier →
CVE-2024-1421 MEDIUM
Component: ht_mega

The HT Mega โ€“ Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the โ€˜border_typeโ€™ attribute of the P...

๐Ÿ“… 2024-03-12
CVSS 6.4 Dossier →
CVE-2024-1397 MEDIUM
Component: ht_mega

The HT Mega โ€“ Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocks in all versions ...

๐Ÿ“… 2024-03-12
CVSS 6.4 Dossier →
Component: ht_mega

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Mega โ€“ Absolute Addons For Elementor.This issue affects HT Mega โ€“ Absolute Addons For ...

๐Ÿ“… 2024-02-29
CVSS 4.3 Dossier →
Component: hashbar

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HashBar โ€“ WordPress Notification Bar a...

๐Ÿ“… 2023-12-29
CVSS 5.9 Dossier →
Component: ht_mega

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Mega โ€“ Absolute Addons For Elemento...

๐Ÿ“… 2023-12-29
CVSS 7.1 Dossier →
Component: wishsuite

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in HasTheme WishSuite โ€“ Wishlist for WooCommerce plugin <=ย 1.3.4 versions....

๐Ÿ“… 2023-08-30
CVSS 5.9 Dossier →
Component: woolentor_-_woocommerce_elementor_addons_\+_builder

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor plugin <=ย 2.6.2 versions....

๐Ÿ“… 2023-07-17
CVSS 4.3 Dossier →
Component: wishsuite

Cross-Site Request Forgery (CSRF) vulnerability in HasTheme WishSuite plugin <=ย 1.3.3 versions....

๐Ÿ“… 2023-07-11
CVSS 4.3 Dossier →
Component: justtables

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes JustTables plugin <=ย 1.4.9 versions....

๐Ÿ“… 2023-07-11
CVSS 4.3 Dossier →
Component: ht_menu

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Menu plugin <=ย 1.2.1 versions....

๐Ÿ“… 2023-07-11
CVSS 4.3 Dossier →
Component: swatchly

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Swatchly plugin <=ย 1.2.0 versions....

๐Ÿ“… 2023-07-11
CVSS 4.3 Dossier →
Component: ht_feed

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Feed plugin <=ย 1.2.7 versions....

๐Ÿ“… 2023-07-10
CVSS 4.3 Dossier →
Component: ht_easy_ga4_\(google_analytics_4\)

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Easy GA4 ( Google Analytics 4 ) plugin <=ย 1.0.6 versions....

๐Ÿ“… 2023-06-15
CVSS 4.3 Dossier →
Page 3 of 4 (96 Total Records)