Ht Plugins - vulnerabilities (CVEs)
12 CVEs in 8 products, 0 in the last 30 days, newest from 2026-07-27.
Products
- Ht Contact Form 7 - 3 CVEs
- Extensions For Cf7 - 2 CVEs
- Ht Mega Absolute Addons For Wpbakery Page Builder - 2 CVEs
- Ht Feed - 1 CVEs
- Ht Slider For Elementor - 1 CVEs
- Ht Team Member - 1 CVEs
- Insert Headers And Footers Code Ht Script - 1 CVEs
- Wishsuite - 1 CVEs
Newest CVEs of Ht Plugins
- CVE-2026-66474 - CVSS 4.3 (medium), 2026-07-27: Unauthenticated Cross Site Request Forgery (CSRF) in Insert Headers and Footers Code – HT Script <= 1.1.8 versions.
- CVE-2026-42728 - CVSS 7.1 (high), 2026-05-27: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Contact Form 7 ht-contactform allows…
- CVE-2026-24991 - CVSS 5.3 (medium), 2026-02-03: Authorization Bypass Through User-Controlled Key vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Exploiting Incorrectly Configured…
- CVE-2025-60147 - CVSS 6.5 (medium), 2025-09-26: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Feed ht-instagram allows Stored XSS.This…
- CVE-2025-53463 - CVSS 6.5 (medium), 2025-09-22: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Mega – Absolute Addons for WPBakery Page…
- CVE-2025-54015 - CVSS 6.6 (medium), 2025-07-16: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in HT Plugins HT Contact Form 7…
- CVE-2025-53199 - CVSS 6.5 (medium), 2025-06-27: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Slider For Elementor…
- CVE-2025-53206 - CVSS 6.5 (medium), 2025-06-27: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Mega – Absolute Addons for WPBakery Page…
- CVE-2025-49309 - CVSS 6.5 (medium), 2025-06-06: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Team Member ht-team-member allows Stored…
- CVE-2025-30820 - CVSS 7.5 (high), 2025-03-27: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in HT Plugins WishSuite wishsuite allows…
- CVE-2025-24726 - CVSS 6.5 (medium), 2025-01-24: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Contact Form 7 ht-contactform allows…
- CVE-2025-24695 - CVSS 4.4 (medium), 2025-01-24: Server-Side Request Forgery (SSRF) vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Server Side Request Forgery.This issue affects…
