Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: HT Plugins Clear all filters
TI-2026-30951 CVE-2026-42728 · GHSA-9m37-mfhg-pv2m

WordPress HT Contact Form 7 plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Contact Form 7 ht-contactform allows Stored XSS.This issue affects HT Contact Form 7: from n/a through <…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00181 Published 2026-05-27 No fix listed CWE-79
TI-2026-20176 CVE-2026-24991 · GHSA-4vq2-qq4m-vp5x

WordPress Extensions For CF7 plugin <= 3.4.0 - Insecure Direct Object References (IDOR) vulnerability

Priority LOW 30

Authorization Bypass Through User-Controlled Key vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Extensions For…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00241 Published 2026-02-03 No fix listed CWE-639
TI-2025-37513 CVE-2025-60147 · GHSA-vj22-mh53-pp5f

WordPress HT Feed Plugin <= 1.3.0 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Feed ht-instagram allows Stored XSS.This issue affects HT Feed: from n/a through <= 1.3.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00209 Published 2025-09-26 No fix listed CWE-79
TI-2025-33408 CVE-2025-53463 · GHSA-69jf-wf9m-5q32

WordPress HT Mega – Absolute Addons for WPBakery Page Builder Plugin <= 1.0.9 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Mega – Absolute Addons for WPBakery Page Builder ht-mega-for-wpbakery allows DOM-Based XSS.This issue af…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00274 Published 2025-09-22 No fix listed CWE-79
TI-2025-33860 CVE-2025-54015 · GHSA-62c6-8cw5-3hfr

WordPress HT Contact Form 7 plugin <= 2.0.0 - Local File Inclusion Vulnerability

Priority LOW 32

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in HT Plugins HT Contact Form 7 ht-contactform allows PHP Local File Inclusion.This issue affects HT C…

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00591 Published 2025-07-16 No fix listed CWE-98
TI-2025-33173 CVE-2025-53206 · GHSA-pj8v-xpf4-ff67

WordPress HT Mega – Absolute Addons for WPBakery Page Builder plugin <= 1.0.8 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Mega – Absolute Addons for WPBakery Page Builder ht-mega-for-wpbakery allows Stored XSS.This issue affec…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00251 Published 2025-06-27 No fix listed CWE-79
TI-2025-33166 CVE-2025-53199 · GHSA-vpq2-hr7m-qxjj

WordPress HT Slider For Elementor plugin <= 1.6.5 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Slider For Elementor ht-slider-for-elementor allows DOM-Based XSS.This issue affects HT Slider For Eleme…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00236 Published 2025-06-27 No fix listed CWE-79
TI-2025-31357 CVE-2025-49309 · GHSA-7hmg-q99p-gw95

WordPress HT Team Member plugin <= 1.1.7 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Team Member ht-team-member allows Stored XSS.This issue affects HT Team Member: from n/a through <= 1.1.…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00269 Published 2025-06-06 No fix listed CWE-79
TI-2025-22090 CVE-2025-30820 · GHSA-9v27-96h9-9xrq

WordPress WishSuite plugin <= 1.4.4 - Local File Inclusion Vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in HT Plugins WishSuite wishsuite allows PHP Local File Inclusion.This issue affects WishSuite: from n…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01109 Published 2025-03-27 No fix listed CWE-98
TI-2025-18443 CVE-2025-24726 · GHSA-rhmc-gg97-3jw8

WordPress Contact Form 7 Widget plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Contact Form 7 ht-contactform allows Stored XSS.This issue affects HT Contact Form 7: from n/a through <…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00319 Published 2025-01-24 No fix listed CWE-79