HT
Vendor
htplugins
8
CVEs
0
On KEV
2
New 30D
Products
EF9.8
Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)
htplugins
1 CVEs0 on KEV1 new
HC7.2
HT Contact Form – Drag & Drop Form Builder for WordPress
htplugins
3 CVEs0 on KEV1 new
DY6.4
Docus – YouTube Video Playlist
htplugins
1 CVEs0 on KEV0 new
HS6.4
HT Slider For Elementor
htplugins
1 CVEs0 on KEV0 new
IH6.4
Insert Headers and Footers Code – HT Script
htplugins
1 CVEs0 on KEV0 new
WW6.4
WishSuite – Wishlist for WooCommerce
htplugins
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-94589 | EF Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) htplugins | 9.8 | Oct 10 | Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.4.5 - Unauthenticated Arbitrary File Upload via Signature Field File Upload |
| CVE-2026-96326 | HC HT Contact Form – Drag & Drop Form Builder for WordPress htplugins | 7.2 | Sep 29 | HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Field |
| CVE-2026-93303 | HC HT Contact Form – Drag & Drop Form Builder for WordPress htplugins | 7.2 | Sep 25 | HT Contact Form <= 2.10.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'form_data' Rich Text Field via Draft Save/Resume |
| CVE-2026-7052 | HC HT Contact Form – Drag & Drop Form Builder for WordPress htplugins | 7.2 | May 28 | HT Contact Form <= 2.8.2 - Unauthenticated Stored Cross-Site Scripting via File Upload Field |
| CVE-2026-1888 | DY Docus – YouTube Video Playlist htplugins | 6.4 | Feb 6 | Docus <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes |
| CVE-2025-13838 | WW WishSuite – Wishlist for WooCommerce htplugins | 6.4 | Dec 21 | WishSuite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute |
| CVE-2025-14278 | HS HT Slider For Elementor htplugins | 6.4 | Dec 13 | HT Slider for Elementor <= 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-12112 | IH Insert Headers and Footers Code – HT Script htplugins | 6.4 | Nov 8 | Insert Headers and Footers Code – HT Script <= 1.1.6 - Authenticated (Author+) Stored Cross-Site Scripting |