HT Plugins vulnerabilities

CVEs per yearBy the year they were published

1. 20259
2. 20263

Newest CVEs

• CVE-2026-66474

  WordPress Insert Headers and Footers Code – HT Script plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability

  HT Plugins · Insert Headers and Footers Code – HT Script

  Medium4.3
• CVE-2026-42728

  WordPress HT Contact Form 7 plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability

  HT Plugins · HT Contact Form 7

  High7.1
• CVE-2026-24991

  WordPress Extensions For CF7 plugin <= 3.4.0 - Insecure Direct Object References (IDOR) vulnerability

  HT Plugins · Extensions For CF7

  Medium5.3
• CVE-2025-60147

  WordPress HT Feed Plugin <= 1.3.0 - Cross Site Scripting (XSS) Vulnerability

  HT Plugins · HT Feed

  Medium6.5
• CVE-2025-53463

  WordPress HT Mega – Absolute Addons for WPBakery Page Builder Plugin <= 1.0.9 - Cross Site Scripting (XSS) Vulnerability

  HT Plugins · HT Mega – Absolute Addons for WPBakery Page Builder

  Medium6.5
• CVE-2025-54015

  WordPress HT Contact Form 7 plugin <= 2.0.0 - Local File Inclusion Vulnerability

  HT Plugins · HT Contact Form 7

  Medium6.6
• CVE-2025-53206

  WordPress HT Mega – Absolute Addons for WPBakery Page Builder plugin <= 1.0.8 - Cross Site Scripting (XSS) Vulnerability

  HT Plugins · HT Mega – Absolute Addons for WPBakery Page Builder

  Medium6.5
• CVE-2025-53199

  WordPress HT Slider For Elementor plugin <= 1.6.5 - Cross Site Scripting (XSS) Vulnerability

  HT Plugins · HT Slider For Elementor

  Medium6.5
• CVE-2025-49309

  WordPress HT Team Member plugin <= 1.1.7 - Cross Site Scripting (XSS) Vulnerability

  HT Plugins · HT Team Member

  Medium6.5
• CVE-2025-30820

  WordPress WishSuite plugin <= 1.4.4 - Local File Inclusion Vulnerability

  HT Plugins · WishSuite

  High7.5