Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Harmonic Design Clear all filters
TI-2026-19784 CVE-2026-24544 · GHSA-m3mf-5v3f-q955

WordPress HD Quiz plugin <= 2.0.9 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Harmonic Design HD Quiz hd-quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz: from n/a through <= 2.0.9.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00234 Published 2026-01-23 No fix listed CWE-862
TI-2025-42370 CVE-2025-68912 · GHSA-q65c-hvrq-4vmv

WordPress HDForms plugin <= 1.6.1 - Arbitrary File Deletion vulnerability

Priority MEDIUM 44

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Harmonic Design HDForms hdforms allows Path Traversal.This issue affects HDForms: from n/a through <= 1.6.1.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00641 Published 2026-01-22 No fix listed CWE-22
TI-2024-12425 CVE-2024-13383 · GHSA-r5wg-fxw7-6v36

HD Quiz < 2.0.0 - Editor+ Stored XSS

Priority MEDIUM 55

The HD Quiz WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_ht…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00326 Published 2025-05-15 Fixed in 2.0.0 CWE-79
TI-2024-33175 CVE-2024-49689 · GHSA-38wf-gvg7-rrvw

WordPress HD Quiz – Save Results Light plugin <= 0.5 - Broken Access Control vulnerability

Priority LOW 25

Missing Authorization vulnerability in Harmonic Design HD Quiz – Save Results Light hd-quiz-save-results-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz – Save Res…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00476 Published 2024-11-19 No fix listed CWE-862
TI-2024-14762 CVE-2024-22161 · GHSA-h4gx-v8fr-h545

WordPress HD Quiz Plugin <= 1.8.11 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Harmonic Design HD Quiz allows Stored XSS.This issue affects HD Quiz: from n/a through 1.8.11.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00316 Published 2024-01-31 No fix listed CWE-79
TI-2021-06856 CVE-2021-24571 · GHSA-7hqj-44cw-26jp

HD Quiz < 1.8.4 - Authenticated Stored XSS

Priority LOW 25

The HD Quiz WordPress plugin before 1.8.4 does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-08-23 Fixed in 1.8.4 CWE-79