İçeriğe atla
Noroxi

HasThemes kayıtları

hasthemes üreticisine ait 96 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%34,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21
  2. 23
  3. 24
  4. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

96 kayıt
  • CVE-2023-37999
    40Planlayın

    WordPress HT Mega Absolute Addons for Elementor plugin <= 2.2.0 - Unauthenticated Privilege Escalation vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    hasthemes · ht mega17 May 2024

  • CVE-2023-0232
    40Planlayın

    ShopLentor < 2.5.4 - PHP Object Injection

    KritikCVSS 9,8İstismar yokEPSS %3

    hasthemes · shoplentor21 Şub 2023

  • CVE-2025-7340
    40Planlayın

    HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    hasthemes · download contact form 7 widget for elementor page builder \& gutenberg blocks15 Tem 2025

  • CVE-2025-7360
    39İzleyin

    HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Move

    KritikCVSS 9,8İstismar yokEPSS %1

    hasthemes · download contact form 7 widget for elementor page builder \& gutenberg blocks15 Tem 2025

  • CVE-2025-7341
    39İzleyin

    HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion

    KritikCVSS 9,8İstismar yokEPSS %1

    hasthemes · download contact form 7 widget for elementor page builder \& gutenberg blocks15 Tem 2025

  • CVE-2025-12493
    39İzleyin

    ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template'

    KritikCVSS 9,8İstismar yokEPSS %0

    hasthemes · shoplentor4 Kas 2025

  • CVE-2024-38706
    35İzleyin

    WordPress HT Mega plugin <= 2.5.7 - JSON Path Traversal vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    hasthemes · ht mega12 Tem 2024

  • CVE-2023-23804
    35İzleyin

    WordPress HT Feed Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    hasthemes · ht feed10 Tem 2023

  • CVE-2023-23802
    35İzleyin

    WordPress HT Easy GA4 ( Google Analytics 4 ) Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    hasthemes · ht easy ga4 \(google analytics 4\)15 Haz 2023

  • CVE-2023-23791
    35İzleyin

    WordPress HT Menu Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    hasthemes · ht menu11 Tem 2023

  • CVE-2023-23731
    35İzleyin

    WordPress WishSuite Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    hasthemes · wishsuite11 Tem 2023

  • CVE-2023-23803
    35İzleyin

    WordPress JustTables – WooCommerce Product Table Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    hasthemes · justtables11 Tem 2023

  • CVE-2023-23792
    35İzleyin

    WordPress Swatchly – WooCommerce Variation Swatches for Products Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    hasthemes · swatchly11 Tem 2023

  • CVE-2023-23801
    35İzleyin

    WordPress Really Simple Google Tag Manager Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    hasthemes · really simple google tag manager6 Nis 2023

  • CVE-2022-47172
    35İzleyin

    WordPress WooLentor Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    hasthemes · woolentor - woocommerce elementor addons \+ builder17 Tem 2023

  • CVE-2023-51529
    35İzleyin

    WordPress HT Mega Plugin <= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    hasthemes · ht mega29 Şub 2024

  • CVE-2023-6214
    30İzleyin

    HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_products

    YüksekCVSS 7,5İstismar yokEPSS %0

    hasthemes · ht mega2 May 2024

  • CVE-2024-4566
    28İzleyin

    ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modification

    YüksekCVSS 7,1İstismar yokEPSS %0

    hasthemes · shoplentor21 May 2024

  • CVE-2024-1974
    26İzleyin

    HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal

    OrtaCVSS 6,5İstismar yokEPSS %1

    hasthemes · ht mega9 Nis 2024

  • CVE-2024-32782
    26İzleyin

    WordPress HT Mega plugin <= 2.4.7 - Sensitive Data Exposure vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    hasthemes · ht mega24 Nis 2024

  • CVE-2024-9538
    26İzleyin

    ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template

    OrtaCVSS 6,5İstismar yokEPSS %0

    hasthemes · shoplentor11 Eki 2024

  • CVE-2023-0502
    26İzleyin

    WP News <= 1.1.9 - Arbitrary Plugin Activation via CSRF

    OrtaCVSS 6,5İstismar yokEPSS %0

    hasthemes · wp news27 Mar 2023

  • CVE-2023-0501
    26İzleyin

    WP Insurance < 2.1.4 - Arbitrary Plugin Activation via CSRF

    OrtaCVSS 6,5İstismar yokEPSS %0

    hasthemes · wp insurance27 Mar 2023

  • CVE-2023-0500
    26İzleyin

    WP Film Studio < 1.3.5 - Arbitrary Plugin Activation via CSRF

    OrtaCVSS 6,5İstismar yokEPSS %0

    hasthemes · wp film studio27 Mar 2023

  • CVE-2025-3775
    26İzleyin

    ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.2 - Unauthenticated Server-Side Request

    OrtaCVSS 6,5İstismar yokEPSS %0

    hasthemes · shoplentor25 Nis 2025