Login Request a demo
HT
Vendor
htplugins
8 products with CVEs on record
15
CVEs
0
On KEV
1
New 30D
Products
EF
Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)
htplugins
9.8
2 CVEs0 on KEV1 new
HC
HT Contact Form – Drag & Drop Form Builder for WordPress
htplugins
9.8
6 CVEs0 on KEV0 new
IH
Insert Headers and Footers Code – HT Script
htplugins
6.5
2 CVEs0 on KEV0 new
DY
Docus – YouTube Video Playlist
htplugins
6.4
1 CVEs0 on KEV0 new
HE
HT Easy GA4 – Google Analytics WordPress Plugin
htplugins
5.3
1 CVEs0 on KEV0 new
HS
HT Slider For Elementor
htplugins
6.4
1 CVEs0 on KEV0 new
WW
WishSuite – Wishlist for WooCommerce
htplugins
6.4
1 CVEs0 on KEV0 new
WT
WP Team – WordPress Team Member Plugin
htplugins
6.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-94589
EF
Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)
htplugins
9.8
1%
Oct 10Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.4.5 - Unauthenticated Arbitrary File Upload via Signature Field File Upload
CVE-2026-96326
HC
HT Contact Form – Drag & Drop Form Builder for WordPress
htplugins
7.2
0%
Sep 29HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Field
CVE-2026-93303
HC
HT Contact Form – Drag & Drop Form Builder for WordPress
htplugins
7.2
0%
Sep 25HT Contact Form <= 2.10.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'form_data' Rich Text Field via Draft Save/Resume
CVE-2026-7052
HC
HT Contact Form – Drag & Drop Form Builder for WordPress
htplugins
7.2
0%
May 28HT Contact Form <= 2.8.2 - Unauthenticated Stored Cross-Site Scripting via File Upload Field
CVE-2026-1888
DY
Docus – YouTube Video Playlist
htplugins
6.4
0%
Feb 6Docus <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2025-13838
WW
WishSuite – Wishlist for WooCommerce
htplugins
6.4
0%
Dec 21WishSuite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute
CVE-2025-14278
HS
HT Slider For Elementor
htplugins
6.4
0%
Dec 13HT Slider for Elementor <= 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-12112
IH
Insert Headers and Footers Code – HT Script
htplugins
6.4
0%
Nov 8Insert Headers and Footers Code – HT Script <= 1.1.6 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2025-7645
EF
Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)
htplugins
8.1
1%
Jul 22Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.2.8 - Unauthenticated Arbitrary File Deletion Triggered via Admin Form Submission Deletion
CVE-2025-7340
HC
HT Contact Form – Drag & Drop Form Builder for WordPress
htplugins
9.8
2%
Jul 15HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload
CVE-2025-7360
HC
HT Contact Form – Drag & Drop Form Builder for WordPress
htplugins
9.8
1%
Jul 15HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Move
CVE-2025-7341
HC
HT Contact Form – Drag & Drop Form Builder for WordPress
htplugins
9.8
1%
Jul 15HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion
CVE-2025-2779
IH
Insert Headers and Footers Code – HT Script
htplugins
6.5
0%
Apr 2Insert Headers and Footers Code – HT Script <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
CVE-2024-10223
WT
WP Team – WordPress Team Member Plugin
htplugins
6.4
0%
Oct 30HT Team Member <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via htteamember Shortcode
CVE-2024-1176
HE
HT Easy GA4 – Google Analytics WordPress Plugin
htplugins
5.3
1%
Mar 13HT Easy GA4 – Google Analytics WordPress Plugin <= 1.1.5 - Missing Authorization to Unauthenticated GA4 Email Update