Login Request a demo
HA
Vendor
Hasthemes
36 products with CVEs on record
100
CVEs
0
On KEV
0
New 30D
Products
HM
HT Mega
Hasthemes
9.8
30 CVEs0 on KEV0 new
SH
Shoplentor
Hasthemes
9.8
19 CVEs0 on KEV0 new
WW
Woolentor - Woocommerce Elementor Addons + Builder
Hasthemes
8.8
4 CVEs0 on KEV0 new
DC
Download Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks
Hasthemes
9.8
3 CVEs0 on KEV0 new
EF
Extensions For Cf7
Hasthemes
6.1
3 CVEs0 on KEV0 new
WI
Wishsuite
Hasthemes
8.8
3 CVEs0 on KEV0 new
FW
Free WooCommerce Theme 99fy Extension
HasThemes
6.5
2 CVEs0 on KEV0 new
HA
Hashbar
Hasthemes
5.4
2 CVEs0 on KEV0 new
HE
HT Easy Ga4 (google Analytics 4)
Hasthemes
8.8
2 CVEs0 on KEV0 new
HF
HT Feed
Hasthemes
8.8
2 CVEs0 on KEV0 new
HP
HT Politic
Hasthemes
5.4
2 CVEs0 on KEV0 new
WB
WC Builder
HasThemes
6.5
2 CVEs0 on KEV0 new
WE
WP Education
Hasthemes
5.4
2 CVEs0 on KEV0 new
WP
WP Plugin Manager
HasThemes
6.5
2 CVEs0 on KEV0 new
CF
Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks
Hasthemes
4.3
1 CVEs0 on KEV0 new
CZ
Coupon Zen
Hasthemes
4.3
1 CVEs0 on KEV0 new
EC
Ever Compare
Hasthemes
4.3
1 CVEs0 on KEV0 new
HB
HT Builder
Hasthemes
5.4
1 CVEs0 on KEV0 new
HE
HT Easy Ga4
Hasthemes
5.3
1 CVEs0 on KEV0 new
HE
HT Event
Hasthemes
4.3
1 CVEs0 on KEV0 new
HM
HT Menu
Hasthemes
8.8
1 CVEs0 on KEV0 new
HP
HT Portfolio
Hasthemes
4.3
1 CVEs0 on KEV0 new
HS
HT Slider For Elementor
Hasthemes
4.3
1 CVEs0 on KEV0 new
JU
Justtables
Hasthemes
8.8
1 CVEs0 on KEV0 new
PL
Preview Link Generator
Hasthemes
4.3
1 CVEs0 on KEV0 new
QU
Quickswish
Hasthemes
4.3
1 CVEs0 on KEV0 new
RS
Really Simple Google Tag Manager
Hasthemes
8.8
1 CVEs0 on KEV0 new
SW
Swatchly
Hasthemes
8.8
1 CVEs0 on KEV0 new
SW
Swatchly – WooCommerce Variation Swatches for Products
HasThemes
7.1
1 CVEs0 on KEV0 new
SW
Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches)
hasthemes
6.5
1 CVEs0 on KEV0 new
WB
WC Builder – WooCommerce Page Builder for WPBakery
hasthemes
4.4
1 CVEs0 on KEV0 new
WS
WC Sales Notification
Hasthemes
4.3
1 CVEs0 on KEV0 new
WF
WP Film Studio
Hasthemes
6.5
1 CVEs0 on KEV0 new
WI
WP Insurance
Hasthemes
6.5
1 CVEs0 on KEV0 new
WN
WP News
Hasthemes
6.5
1 CVEs0 on KEV0 new
WT
WP Templata
HasThemes
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-66605
SW
Swatchly – WooCommerce Variation Swatches for Products
HasThemes
7.1
0%
Aug 20WordPress Swatchly – WooCommerce Variation Swatches for Products plugin <= 1.4.13 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68533
WB
WC Builder
HasThemes
6.5
0%
Dec 24WordPress WC Builder plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-14054
WB
WC Builder – WooCommerce Page Builder for WPBakery
hasthemes
4.4
0%
Dec 21WC Builder <= 1.2.0 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'heading_color' Shortcode Attribute
CVE-2025-64271
WP
WP Plugin Manager
HasThemes
6.5
0%
Nov 13WordPress WP Plugin Manager plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-12493
SH
Shoplentor
Hasthemes
9.8
1%
Nov 4ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'
CVE-2025-11823
SH
Shoplentor
Hasthemes
5.4
0%
Oct 25ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-58990
SH
Shoplentor
Hasthemes
5.4
0%
Sep 9WordPress ShopLentor Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-8068
HM
HT Mega
Hasthemes
4.3
0%
Jul 31HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions
CVE-2025-8401
HM
HT Mega
Hasthemes
4.3
0%
Jul 31HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure
CVE-2025-8151
HM
HT Mega
Hasthemes
4.3
0%
Jul 31HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions
CVE-2025-7340
DC
Download Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks
Hasthemes
9.8
2%
Jul 15HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload
CVE-2025-7360
DC
Download Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks
Hasthemes
9.8
1%
Jul 15HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Move
CVE-2025-7341
DC
Download Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks
Hasthemes
9.8
1%
Jul 15HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion
CVE-2025-3775
SH
Shoplentor
Hasthemes
6.5
0%
Apr 25ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameter
CVE-2025-2719
SW
Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches)
hasthemes
6.5
0%
Apr 10Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches) 1.2.8 - 1.4.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
CVE-2025-1802
HM
HT Mega
Hasthemes
5.4
0%
Mar 20HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
CVE-2025-1527
SH
Shoplentor
Hasthemes
5.4
0%
Mar 12ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module
CVE-2025-1261
HM
HT Mega
Hasthemes
5.4
0%
Mar 8HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget
CVE-2025-26917
WT
WP Templata
HasThemes
6.1
0%
Mar 3WordPress WP Templata plugin <= 1.0.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-12599
HM
HT Mega
Hasthemes
6.4
0%
Feb 11The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and…
CVE-2024-12597
HM
HT Mega
Hasthemes
5.4
0%
Feb 4The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'block_css' and 'inner_css' parameters in all versions up to,…
CVE-2025-24695
EF
Extensions For Cf7
Hasthemes
4.4
0%
Jan 24Server-Side Request Forgery (SSRF) vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Server Side Request Forgery.This issue affects Extensions For CF7: from…
CVE-2025-22801
FW
Free WooCommerce Theme 99fy Extension
HasThemes
6.5
0%
Jan 9WordPress Free WooCommerce Theme 99fy Extension plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability
CVE-2024-51673
HP
HT Politic
Hasthemes
5.4
0%
Nov 9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems HT Politic wp-politic allows DOM-Based XSS.This issue affects HT…
CVE-2024-51682
HB
HT Builder
Hasthemes
5.4
0%
Nov 4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Builder – WordPress Theme Builder for Elementor ht-builder…
CVE-2024-49630
WE
WP Education
Hasthemes
5.4
0%
Oct 20Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems WP Education wp-education allows Stored XSS.This issue affects WP…
CVE-2024-9538
SH
Shoplentor
Hasthemes
6.5
0%
Oct 11The ShopLentor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.8 via the 'render' function in…
CVE-2024-8910
HM
HT Mega
Hasthemes
4.3
0%
Sep 25The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.5 via the render…
CVE-2024-8668
WW
Woolentor - Woocommerce Elementor Addons + Builder
Hasthemes
5.4
0%
Sep 25The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site…
CVE-2024-38706
HM
HT Mega
Hasthemes
8.8
1%
Jul 12Path Traversal: '.../...//' vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through <= 2.5.7
CVE-2024-5215
HM
HT Mega
Hasthemes
5.4
0%
Jun 26The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 2.5.5 due…
CVE-2024-5173
HM
HT Mega
Hasthemes
5.4
0%
Jun 26The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Video player widget settings in all versions up to, and…
CVE-2024-5530
SH
Shoplentor
Hasthemes
5.4
0%
Jun 11The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site…
CVE-2024-35699
HF
HT Feed
Hasthemes
5.4
0%
Jun 8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in HasThemes HT Feed allows Stored XSS.This issue affects HT Feed: from…
CVE-2024-34767
SH
Shoplentor
Hasthemes
5.4
0%
Jun 3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in HasThemes ShopLentor allows Stored XSS.This issue affects ShopLentor:…
CVE-2024-4876
HM
HT Mega
Hasthemes
5.4
0%
May 21The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘popover_header_text’ parameter in versions up to, and…
CVE-2024-4875
HM
HT Mega
Hasthemes
4.3
1%
May 21The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification of data|loss of data due to a missing capability check on the…
CVE-2024-4566
SH
Shoplentor
Hasthemes
7.1
0%
May 21The ShopLentor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_dismiss function in all versions up to, and…
CVE-2024-3345
SH
Shoplentor
Hasthemes
5.4
0%
May 21The ShopLentor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's woolentorsearch shortcode in all versions up to, and including, 2.8.8 due to…
CVE-2023-37999
HM
HT Mega
Hasthemes
9.8
3%
May 17Improper Privilege Management vulnerability in HasThemes HT Mega allows Privilege Escalation.This issue affects HT Mega: from n/a through 2.2.0
CVE-2024-3990
HM
HT Mega
Hasthemes
5.4
0%
May 14The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Tooltip & Popover Widget in all versions up to, and…
CVE-2024-3989
HM
HT Mega
Hasthemes
5.4
0%
May 14The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Gallery Justify Widget in all versions up to, and…
CVE-2023-6327
SH
Shoplentor
Hasthemes
5.3
1%
May 14The ShopLentor (formerly WooLentor) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the purchased_new_products function in…
CVE-2024-3991
SH
Shoplentor
Hasthemes
5.4
0%
May 2The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site…
CVE-2024-3308
HM
HT Mega
Hasthemes
5.4
0%
May 2The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid widget's attributes in all versions up to, and…
CVE-2024-3307
HM
HT Mega
Hasthemes
5.4
0%
May 2The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown widget's attributes in all versions up to, and…
CVE-2024-2790
HM
HT Mega
Hasthemes
5.4
0%
May 2The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Accordion widget in all versions up to, and including, 2.4.8 due…
CVE-2024-2085
HM
HT Mega
Hasthemes
5.4
0%
May 2The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'size' value in several widgets all versions up to, and…
CVE-2024-2084
HM
HT Mega
Hasthemes
5.4
0%
May 2The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's lightbox widget in all versions up to, and…
CVE-2023-7067
SH
Shoplentor
Hasthemes
4.3
0%
May 2The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to unauthorized…
CVE-2023-6214
HM
HT Mega
Hasthemes
7.5
1%
May 2The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.6 via the…
CVE-2024-32782
HM
HT Mega
Hasthemes
6.5
1%
Apr 24Insertion of Sensitive Information Into Sent Data vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through <= 2.4.7
CVE-2024-1057
SH
Shoplentor
Hasthemes
5.4
0%
Apr 20The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site…
CVE-2024-2946
SH
Shoplentor
Hasthemes
5.4
0%
Apr 9The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site…
CVE-2024-1974
HM
HT Mega
Hasthemes
6.5
1%
Apr 9The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.6 via the render function
CVE-2024-1960
SH
Shoplentor
Hasthemes
5.4
1%
Apr 9The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site…
CVE-2024-2868
SH
Shoplentor
Hasthemes
6.4
0%
Apr 4The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Stored Cross-Site…
CVE-2024-30182
HM
HT Mega
Hasthemes
5.4
0%
Mar 27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a…
CVE-2024-29927
WI
Wishsuite
Hasthemes
5.4
0%
Mar 27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasTheme WishSuite allows Stored XSS.This issue affects WishSuite: from n/a…
CVE-2024-29926
WB
WC Builder
Hasthemes
5.4
0%
Mar 27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes WC Builder allows Stored XSS.This issue affects WC Builder: from…