HasThemes vulnerabilities
26 published CVEs name HasThemes among the affected products.
- Published CVEs
- 26
- Last 12 months
- 4
- Critical
- 1
- Known exploited
- 0
Critical 1High 5Medium 20Low 0Not scored 0
CVEs per yearBy the year they were published
- 202311
- 20248
- 20256
- 20261
Newest CVEs
- CVE-2026-66605
WordPress Swatchly – WooCommerce Variation Swatches for Products plugin <= 1.4.13 - Cross Site Scripting (XSS) vulnerability
HasThemes · Swatchly – WooCommerce Variation Swatches for Products
High7.1 - CVE-2025-68533
WordPress WC Builder plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
HasThemes · WC Builder
Medium6.5 - CVE-2025-14054
WC Builder <= 1.2.0 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'heading_color' Shortcode Attribute
hasthemes · WC Builder – WooCommerce Page Builder for WPBakery
Medium4.4 - CVE-2025-64271
WordPress WP Plugin Manager plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) vulnerability
HasThemes · WP Plugin Manager
Medium4.3 - CVE-2025-2719
Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches) 1.2.8 - 1.4.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
hasthemes · Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches)
Medium6.5 - CVE-2025-26917
WordPress WP Templata plugin <= 1.0.7 - Reflected Cross Site Scripting (XSS) vulnerability
HasThemes · WP Templata
High7.1 - CVE-2025-22801
WordPress Free WooCommerce Theme 99fy Extension plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability
HasThemes · Free WooCommerce Theme 99fy Extension
Medium6.5 - CVE-2024-51682
WordPress HT Builder – WordPress Theme Builder for Elementor plugin <= 1.3.0 - Stored Cross Site Scripting (XSS) vulnerability
HasThemes · HT Builder – WordPress Theme Builder for Elementor
Medium6.5 - CVE-2024-35699
WordPress HT Feed plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability
HasThemes · HT Feed
Medium6.5 - CVE-2024-34767
WordPress ShopLentor plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability
HasThemes · ShopLentor
Medium6.5
Products with the most CVEs
- ShopLentor3
- HT Easy GA4 ( Google Analytics 4 )2
- HT Feed2
- HT Mega – Absolute Addons For Elementor2
- WC Builder2
- Extensions For CF71
- Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)1
- Free WooCommerce Theme 99fy Extension1
- HT Builder – WordPress Theme Builder for Elementor1
- HT Mega1