Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

HasThemes vulnerabilities

26 published CVEs name HasThemes among the affected products.

Published CVEs
26
Last 12 months
4
Critical
1
Known exploited
0

Critical 1High 5Medium 20Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 202311
  2. 20248
  3. 20256
  4. 20261

Newest CVEs

  • CVE-2026-66605

    WordPress Swatchly – WooCommerce Variation Swatches for Products plugin <= 1.4.13 - Cross Site Scripting (XSS) vulnerability

    HasThemes · Swatchly – WooCommerce Variation Swatches for Products

    High7.1
  • CVE-2025-68533

    WordPress WC Builder plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

    HasThemes · WC Builder

    Medium6.5
  • CVE-2025-14054

    WC Builder <= 1.2.0 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'heading_color' Shortcode Attribute

    hasthemes · WC Builder – WooCommerce Page Builder for WPBakery

    Medium4.4
  • CVE-2025-64271

    WordPress WP Plugin Manager plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) vulnerability

    HasThemes · WP Plugin Manager

    Medium4.3
  • CVE-2025-2719

    Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches) 1.2.8 - 1.4.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

    hasthemes · Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches)

    Medium6.5
  • CVE-2025-26917

    WordPress WP Templata plugin <= 1.0.7 - Reflected Cross Site Scripting (XSS) vulnerability

    HasThemes · WP Templata

    High7.1
  • CVE-2025-22801

    WordPress Free WooCommerce Theme 99fy Extension plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability

    HasThemes · Free WooCommerce Theme 99fy Extension

    Medium6.5
  • CVE-2024-51682

    WordPress HT Builder – WordPress Theme Builder for Elementor plugin <= 1.3.0 - Stored Cross Site Scripting (XSS) vulnerability

    HasThemes · HT Builder – WordPress Theme Builder for Elementor

    Medium6.5
  • CVE-2024-35699

    WordPress HT Feed plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability

    HasThemes · HT Feed

    Medium6.5
  • CVE-2024-34767

    WordPress ShopLentor plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability

    HasThemes · ShopLentor

    Medium6.5