Read the docs

HT Plugins

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

HT Plugins records in CISA KEV

No HT Plugins vulnerabilities are listed in CISA KEV.

Records

11 records

TI-2025-22090 CVE-2025-30820 · GHSA-9v27-96h9-9xrq

WordPress WishSuite plugin <= 1.4.4 - Local File Inclusion Vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in HT Plugins WishSuite wishsuite allows PHP Local File Inclusion.This issue affects WishSuite: from n…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01109 Published 2025-03-27 No fix listed CWE-98
TI-2025-33860 CVE-2025-54015 · GHSA-62c6-8cw5-3hfr

WordPress HT Contact Form 7 plugin <= 2.0.0 - Local File Inclusion Vulnerability

Priority LOW 32

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in HT Plugins HT Contact Form 7 ht-contactform allows PHP Local File Inclusion.This issue affects HT C…

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00591 Published 2025-07-16 No fix listed CWE-98
TI-2026-30951 CVE-2026-42728 · GHSA-9m37-mfhg-pv2m

WordPress HT Contact Form 7 plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Contact Form 7 ht-contactform allows Stored XSS.This issue affects HT Contact Form 7: from n/a through <…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00181 Published 2026-05-27 No fix listed CWE-79
TI-2026-20176 CVE-2026-24991 · GHSA-4vq2-qq4m-vp5x

WordPress Extensions For CF7 plugin <= 3.4.0 - Insecure Direct Object References (IDOR) vulnerability

Priority LOW 30

Authorization Bypass Through User-Controlled Key vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Extensions For…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00241 Published 2026-02-03 No fix listed CWE-639
TI-2025-33408 CVE-2025-53463 · GHSA-69jf-wf9m-5q32

WordPress HT Mega – Absolute Addons for WPBakery Page Builder Plugin <= 1.0.9 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Mega – Absolute Addons for WPBakery Page Builder ht-mega-for-wpbakery allows DOM-Based XSS.This issue af…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00274 Published 2025-09-22 No fix listed CWE-79
TI-2025-18443 CVE-2025-24726 · GHSA-rhmc-gg97-3jw8

WordPress Contact Form 7 Widget plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Contact Form 7 ht-contactform allows Stored XSS.This issue affects HT Contact Form 7: from n/a through <…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00319 Published 2025-01-24 No fix listed CWE-79
TI-2025-37513 CVE-2025-60147 · GHSA-vj22-mh53-pp5f

WordPress HT Feed Plugin <= 1.3.0 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Feed ht-instagram allows Stored XSS.This issue affects HT Feed: from n/a through <= 1.3.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00209 Published 2025-09-26 No fix listed CWE-79
TI-2025-33173 CVE-2025-53206 · GHSA-pj8v-xpf4-ff67

WordPress HT Mega – Absolute Addons for WPBakery Page Builder plugin <= 1.0.8 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Mega – Absolute Addons for WPBakery Page Builder ht-mega-for-wpbakery allows Stored XSS.This issue affec…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00251 Published 2025-06-27 No fix listed CWE-79
TI-2025-33166 CVE-2025-53199 · GHSA-vpq2-hr7m-qxjj

WordPress HT Slider For Elementor plugin <= 1.6.5 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Slider For Elementor ht-slider-for-elementor allows DOM-Based XSS.This issue affects HT Slider For Eleme…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00236 Published 2025-06-27 No fix listed CWE-79
TI-2025-31357 CVE-2025-49309 · GHSA-7hmg-q99p-gw95

WordPress HT Team Member plugin <= 1.1.7 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Team Member ht-team-member allows Stored XSS.This issue affects HT Team Member: from n/a through <= 1.1.…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00269 Published 2025-06-06 No fix listed CWE-79
Open these records in search →