Read the docs

Harmonic Design

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Harmonic Design records in CISA KEV

No Harmonic Design vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hd Quiz 3 records MEDIUM

Records

7 records

TI-2024-12425 CVE-2024-13383 · GHSA-r5wg-fxw7-6v36

HD Quiz < 2.0.0 - Editor+ Stored XSS

Priority MEDIUM 55

The HD Quiz WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_ht…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00326 Published 2025-05-15 Fixed in 2.0.0 CWE-79
TI-2025-42370 CVE-2025-68912 · GHSA-q65c-hvrq-4vmv

WordPress HDForms plugin <= 1.6.1 - Arbitrary File Deletion vulnerability

Priority MEDIUM 44

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Harmonic Design HDForms hdforms allows Path Traversal.This issue affects HDForms: from n/a through <= 1.6.1.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00641 Published 2026-01-22 No fix listed CWE-22
TI-2024-14762 CVE-2024-22161 · GHSA-h4gx-v8fr-h545

WordPress HD Quiz Plugin <= 1.8.11 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Harmonic Design HD Quiz allows Stored XSS.This issue affects HD Quiz: from n/a through 1.8.11.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00316 Published 2024-01-31 No fix listed CWE-79
TI-2024-33175 CVE-2024-49689 · GHSA-38wf-gvg7-rrvw

WordPress HD Quiz – Save Results Light plugin <= 0.5 - Broken Access Control vulnerability

Priority LOW 25

Missing Authorization vulnerability in Harmonic Design HD Quiz – Save Results Light hd-quiz-save-results-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz – Save Res…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00476 Published 2024-11-19 No fix listed CWE-862
TI-2021-06856 CVE-2021-24571 · GHSA-7hqj-44cw-26jp

HD Quiz < 1.8.4 - Authenticated Stored XSS

Priority LOW 25

The HD Quiz WordPress plugin before 1.8.4 does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-08-23 Fixed in 1.8.4 CWE-79
TI-2026-19784 CVE-2026-24544 · GHSA-m3mf-5v3f-q955

WordPress HD Quiz plugin <= 2.0.9 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Harmonic Design HD Quiz hd-quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz: from n/a through <= 2.0.9.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00234 Published 2026-01-23 No fix listed CWE-862
Open these records in search →