devitemsllc

Records131All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high29CVSS 7.0–8.9

Exploited now

devitemsllc records in CISA KEV

No devitemsllc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ht Mega 30 records MEDIUM Shoplentor 19 records HIGH Woolentor - Woocommerce Elementor Addons + Builder 4 records LOW Download Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks 3 records MEDIUM Extensions For Cf7 3 records LOW Wishsuite 3 records LOW Hashbar 2 records MEDIUM Ht Easy Ga4 (google Analytics 4) 2 records LOW

Records

2 records in Hashbar · all components

TI-2022-04250 CVE-2022-4650 · GHSA-5645-4fvm-2wfj

HashBar – WordPress Notification Bar < 1.3.6 - Contributor+ Stored XSS via Shortcode

MEDIUM 58

The HashBar WordPress plugin before 1.3.6 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2023-01-23 Fixed in 1.3.6 CWE-79

TI-2023-28030 CVE-2023-51372 · GHSA-w8pm-g6gf-4v9x

WordPress HashBar – WordPress Notification Bar Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HashBar – WordPress Notification Bar allows Stored XSS.This issue affects HashBar – WordPress Notification B…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0031 Published 2023-12-29 No fix listed CWE-79

Open these records in search →

Critical	7
High	29
Medium	95
Low	0
No CVSS	0