HP
Vendor
HT Plugins
8 products with CVEs on record
12
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-66474
IH
Insert Headers and Footers Code – HT Script
HT Plugins
4.3
0%
Jul 27WordPress Insert Headers and Footers Code – HT Script plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-42728
HC
HT Contact Form 7
HT Plugins
7.1
0%
May 27WordPress HT Contact Form 7 plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24991
EF
Extensions For CF7
HT Plugins
5.3
0%
Feb 3WordPress Extensions For CF7 plugin <= 3.4.0 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-60147
HF
HT Feed
HT Plugins
6.5
0%
Sep 26WordPress HT Feed Plugin <= 1.3.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53463
HM
HT Mega – Absolute Addons for WPBakery Page Builder
HT Plugins
6.5
0%
Sep 22WordPress HT Mega – Absolute Addons for WPBakery Page Builder Plugin <= 1.0.9 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-54015
HC
HT Contact Form 7
HT Plugins
6.6
1%
Jul 16WordPress HT Contact Form 7 plugin <= 2.0.0 - Local File Inclusion Vulnerability
CVE-2025-53206
HM
HT Mega – Absolute Addons for WPBakery Page Builder
HT Plugins
6.5
0%
Jun 27WordPress HT Mega – Absolute Addons for WPBakery Page Builder plugin <= 1.0.8 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-53199
HS
HT Slider For Elementor
HT Plugins
6.5
0%
Jun 27WordPress HT Slider For Elementor plugin <= 1.6.5 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49309
HT
HT Team Member
HT Plugins
6.5
0%
Jun 6WordPress HT Team Member plugin <= 1.1.7 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-30820
WI
WishSuite
HT Plugins
7.5
1%
Mar 27WordPress WishSuite plugin <= 1.4.4 - Local File Inclusion Vulnerability
CVE-2025-24726
HC
HT Contact Form 7
HT Plugins
6.5
0%
Jan 24WordPress Contact Form 7 Widget plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-24695
EF
Extensions For CF7
HT Plugins
4.4
0%
Jan 24WordPress Extensions For CF7 Plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerability