DevItems vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20255
3. 20263

Newest CVEs

• CVE-2026-110895

  WordPress Support Genix plugin <= 1.4.54 - SQL Injection vulnerability

  DevItems · Support Genix

  High8.5
• CVE-2026-94117

  WordPress HashBar – WordPress Notification Bar plugin <= 2.0.3 - SQL Injection vulnerability

  DevItems · HashBar – WordPress Notification Bar

  High7.6
• CVE-2026-66602

  WordPress HashBar – WordPress Notification Bar plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability

  DevItems · HashBar – WordPress Notification Bar

  High8.8
• CVE-2025-58990

  WordPress ShopLentor Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability

  DevItems · ShopLentor

  Medium6.5
• CVE-2025-58635

  WordPress Support Genix Plugin <= 1.4.23 - Broken Access Control Vulnerability

  DevItems · Support Genix

  Medium5.3
• CVE-2025-54695

  WordPress HT Mega Plugin plugin <= 2.9.0 - Broken Access Control Vulnerability

  DevItems · HT Mega

  Medium5.4
• CVE-2025-24624

  WordPress HT Event – WordPress Event Manager Plugin for Elementor Plugin <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerability

  DevItems · HT Event

  High7.1
• CVE-2025-30777

  WordPress Support Genix plugin <= 1.4.11 - Insecure Direct Object References (IDOR) Vulnerability

  DevItems · Support Genix

  Medium4.3
• CVE-2024-51673

  WordPress HT Politic plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

  DevItems · HT Politic

  Medium6.5
• CVE-2024-49630

  WordPress WP Education for Elementor plugin <= 1.2.8 - Stored Cross Site Scripting (XSS) vulnerability

  DevItems · WP Education

  Medium6.5