Login Request a demo
HA
Vendor
HasThemes
42 products with CVEs on record
111
CVEs
0
On KEV
0
New 30D
Products
HM
HT Mega
HasThemes
9.8
30 CVEs0 on KEV0 new
SH
ShopLentor
HasThemes
9.8
21 CVEs0 on KEV0 new
WW
Woolentor - Woocommerce Elementor Addons + Builder
Hasthemes
8.8
4 CVEs0 on KEV0 new
DC
Download Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks
Hasthemes
9.8
3 CVEs0 on KEV0 new
EF
Extensions For CF7
HasThemes
6.1
3 CVEs0 on KEV0 new
HE
HT Easy GA4 ( Google Analytics 4 )
HasThemes
8.8
3 CVEs0 on KEV0 new
WI
Wishsuite
Hasthemes
8.8
3 CVEs0 on KEV0 new
FW
Free WooCommerce Theme 99fy Extension
HasThemes
6.5
2 CVEs0 on KEV0 new
HA
Hashbar
Hasthemes
5.4
2 CVEs0 on KEV0 new
HF
HT Feed
HasThemes
8.8
2 CVEs0 on KEV0 new
HM
HT Mega – Absolute Addons For Elementor
HasThemes
8.8
2 CVEs0 on KEV0 new
HM
HT Mega - Absolute Addons For Elementor Page Builder
Hasthemes
9.8
2 CVEs0 on KEV0 new
HP
HT Politic
Hasthemes
5.4
2 CVEs0 on KEV0 new
WB
WC Builder
HasThemes
6.5
2 CVEs0 on KEV0 new
WE
WP Education
Hasthemes
5.4
2 CVEs0 on KEV0 new
WP
WP Plugin Manager
HasThemes
6.5
2 CVEs0 on KEV0 new
CF
Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks
Hasthemes
4.3
1 CVEs0 on KEV0 new
CZ
Coupon Zen
Hasthemes
4.3
1 CVEs0 on KEV0 new
EC
Ever Compare
Hasthemes
4.3
1 CVEs0 on KEV0 new
EF
Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)
HasThemes
4.3
1 CVEs0 on KEV0 new
HW
HashBar – WordPress Notification Bar
HasThemes
4.8
1 CVEs0 on KEV0 new
HB
HT Builder
Hasthemes
5.4
1 CVEs0 on KEV0 new
HB
HT Builder – WordPress Theme Builder for Elementor
HasThemes
5.4
1 CVEs0 on KEV0 new
HE
HT Easy Ga4
Hasthemes
5.3
1 CVEs0 on KEV0 new
HE
HT Event
Hasthemes
4.3
1 CVEs0 on KEV0 new
HM
HT Menu
HasThemes
8.8
1 CVEs0 on KEV0 new
HP
HT Portfolio
Hasthemes
4.3
1 CVEs0 on KEV0 new
HS
HT Slider For Elementor
Hasthemes
4.3
1 CVEs0 on KEV0 new
JU
JustTables
HasThemes
8.8
1 CVEs0 on KEV0 new
PL
Preview Link Generator
Hasthemes
4.3
1 CVEs0 on KEV0 new
QU
Quickswish
Hasthemes
4.3
1 CVEs0 on KEV0 new
RS
Really Simple Google Tag Manager
HasThemes
8.8
1 CVEs0 on KEV0 new
SW
Swatchly
HasThemes
8.8
1 CVEs0 on KEV0 new
SW
Swatchly – WooCommerce Variation Swatches for Products
HasThemes
7.1
1 CVEs0 on KEV0 new
SW
Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches)
hasthemes
6.5
1 CVEs0 on KEV0 new
WB
WC Builder – WooCommerce Page Builder for WPBakery
hasthemes
4.4
1 CVEs0 on KEV0 new
WS
WC Sales Notification
Hasthemes
4.3
1 CVEs0 on KEV0 new
WO
Woolentor-addons
Hasthemes
5.4
1 CVEs0 on KEV0 new
WF
WP Film Studio
Hasthemes
6.5
1 CVEs0 on KEV0 new
WI
WP Insurance
Hasthemes
6.5
1 CVEs0 on KEV0 new
WN
WP News
Hasthemes
6.5
1 CVEs0 on KEV0 new
WT
WP Templata
HasThemes
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-66605
SW
Swatchly – WooCommerce Variation Swatches for Products
HasThemes
7.1
0%
Aug 20WordPress Swatchly – WooCommerce Variation Swatches for Products plugin <= 1.4.13 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68533
WB
WC Builder
HasThemes
6.5
0%
Dec 24WordPress WC Builder plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-14054
WB
WC Builder – WooCommerce Page Builder for WPBakery
hasthemes
4.4
0%
Dec 21WC Builder <= 1.2.0 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'heading_color' Shortcode Attribute
CVE-2025-64271
WP
WP Plugin Manager
HasThemes
6.5
0%
Nov 13WordPress WP Plugin Manager plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-12493
SH
Shoplentor
Hasthemes
9.8
1%
Nov 4ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'
CVE-2025-11823
SH
Shoplentor
Hasthemes
5.4
0%
Oct 25ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2025-58990
SH
Shoplentor
Hasthemes
5.4
0%
Sep 9WordPress ShopLentor Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-8068
HM
HT Mega
Hasthemes
4.3
0%
Jul 31HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions
CVE-2025-8401
HM
HT Mega
Hasthemes
4.3
0%
Jul 31HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure
CVE-2025-8151
HM
HT Mega
Hasthemes
4.3
0%
Jul 31HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions
CVE-2025-7340
DC
Download Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks
Hasthemes
9.8
2%
Jul 15HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload
CVE-2025-7360
DC
Download Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks
Hasthemes
9.8
1%
Jul 15HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Move
CVE-2025-7341
DC
Download Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks
Hasthemes
9.8
1%
Jul 15HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion
CVE-2025-3775
SH
Shoplentor
Hasthemes
6.5
0%
Apr 25ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request Forgery via URL Parameter
CVE-2025-2719
SW
Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches)
hasthemes
6.5
0%
Apr 10Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches) 1.2.8 - 1.4.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
CVE-2025-1802
HM
HT Mega
Hasthemes
5.4
0%
Mar 20HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
CVE-2025-1527
SH
Shoplentor
Hasthemes
5.4
0%
Mar 12ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module
CVE-2025-1261
HM
HT Mega
Hasthemes
5.4
0%
Mar 8HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget
CVE-2025-26917
WT
WP Templata
HasThemes
6.1
0%
Mar 3WordPress WP Templata plugin <= 1.0.7 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-12599
HM
HT Mega
Hasthemes
6.4
0%
Feb 11HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
CVE-2024-12597
HM
HT Mega
Hasthemes
5.4
0%
Feb 4HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css
CVE-2025-24695
EF
Extensions For Cf7
Hasthemes
4.4
0%
Jan 24WordPress Extensions For CF7 Plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-22801
FW
Free WooCommerce Theme 99fy Extension
HasThemes
6.5
0%
Jan 9WordPress Free WooCommerce Theme 99fy Extension plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability
CVE-2024-51673
HP
HT Politic
Hasthemes
5.4
0%
Nov 9WordPress HT Politic plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability
CVE-2024-51682
HB
HT Builder – WordPress Theme Builder for Elementor
HasThemes
5.4
0%
Nov 4WordPress HT Builder – WordPress Theme Builder for Elementor plugin <= 1.3.0 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2024-49630
WE
WP Education
Hasthemes
5.4
0%
Oct 20WordPress WP Education for Elementor plugin <= 1.2.8 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2024-9538
SH
Shoplentor
Hasthemes
6.5
0%
Oct 11ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template
CVE-2024-8910
HM
HT Mega
Hasthemes
4.3
0%
Sep 25HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id
CVE-2024-8668
WW
Woolentor - Woocommerce Elementor Addons + Builder
Hasthemes
5.4
0%
Sep 25ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
CVE-2024-38706
HM
HT Mega
Hasthemes
8.8
1%
Jul 12WordPress HT Mega plugin <= 2.5.7 - JSON Path Traversal vulnerability
CVE-2024-5215
HM
HT Mega
Hasthemes
5.4
0%
Jun 26HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
CVE-2024-5173
HM
HT Mega
Hasthemes
5.4
0%
Jun 26HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settings
CVE-2024-5530
SH
Shoplentor
Hasthemes
5.4
0%
Jun 11ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Product Horizontal Filter Widget
CVE-2024-35699
HF
HT Feed
HasThemes
5.4
0%
Jun 8WordPress HT Feed plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability
CVE-2024-34767
SH
ShopLentor
HasThemes
5.4
0%
Jun 3WordPress ShopLentor plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability
CVE-2024-4876
HM
HT Mega
Hasthemes
5.4
0%
May 21HT Mega – Absolute Addons For Elementor <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-3345
SH
Shoplentor
Hasthemes
5.4
0%
May 21ShopLentor <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via woolentorsearch Shortcode
CVE-2024-4566
SH
Shoplentor
Hasthemes
7.1
0%
May 21ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modification
CVE-2024-4875
HM
HT Mega
Hasthemes
4.3
1%
May 21HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update
CVE-2023-37999
HM
HT Mega
HasThemes
9.8
3%
May 17WordPress HT Mega Absolute Addons for Elementor plugin <= 2.2.0 - Unauthenticated Privilege Escalation vulnerability
CVE-2024-3990
HM
HT Mega
Hasthemes
5.4
0%
May 9HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip & Popover Widget
CVE-2023-6327
SH
Shoplentor
Hasthemes
5.3
1%
May 9ShopLentor (formerly WooLentor) <= 2.8.7 - Missing Authorization via purchased_new_products
CVE-2024-3989
HM
HT Mega
Hasthemes
5.4
0%
May 9HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justify
CVE-2024-3307
HM
HT Mega
Hasthemes
5.4
0%
May 2HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
CVE-2024-2084
HM
HT Mega
Hasthemes
5.4
0%
May 2HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox Widget
CVE-2023-7067
SH
Shoplentor
Hasthemes
4.3
0%
May 2ShopLentor <= 2.8.1 - Improper Authorization via woolentor_template_store
CVE-2024-3991
SH
Shoplentor
Hasthemes
5.4
0%
May 2ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.7 - Authenticated (contributor+) Stored Cross-Site Scripting via _id
CVE-2023-6214
HM
HT Mega
Hasthemes
7.5
1%
May 2HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_products
CVE-2024-2790
HM
HT Mega
Hasthemes
5.4
0%
May 2HT Mega – Absolute Addons For Elementor <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQ
CVE-2024-3308
HM
HT Mega
Hasthemes
5.4
0%
May 2HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid Widget
CVE-2024-2085
HM
HT Mega
Hasthemes
5.4
0%
May 2HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size'
CVE-2024-32782
HM
HT Mega
Hasthemes
6.5
1%
Apr 24WordPress HT Mega plugin <= 2.4.7 - Sensitive Data Exposure vulnerability
CVE-2024-1057
SH
Shoplentor
Hasthemes
5.4
0%
Apr 20ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-2946
SH
Shoplentor
Hasthemes
5.4
0%
Apr 9ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.4 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget
CVE-2024-1960
SH
Shoplentor
Hasthemes
5.4
1%
Apr 9ShopLentor <= 2.8.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Banner Link
CVE-2024-1974
HM
HT Mega
Hasthemes
6.5
1%
Apr 9HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal
CVE-2024-2868
SH
Shoplentor
Hasthemes
6.4
0%
Apr 4ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout
CVE-2024-30182
HM
HT Mega
Hasthemes
5.4
0%
Mar 27WordPress HT Mega – Absolute Addons For Elementor plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability
CVE-2024-29927
WI
Wishsuite
Hasthemes
5.4
0%
Mar 27WordPress WishSuite plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability
CVE-2024-29926
WB
WC Builder
HasThemes
5.4
0%
Mar 27WordPress WC Builder plugin <= 1.0.18 - Cross Site Scripting (XSS) vulnerability