Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

holithemes vulnerabilities

5 published CVEs name holithemes among the affected products.

Published CVEs
5
Last 12 months
2
Critical
1
Known exploited
0

Critical 1High 1Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20242
  2. 20251
  3. 20262

Newest CVEs

  • CVE-2026-92097

    Click to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder

    holithemes · Click to Chat – HoliThemes

    Critical9.1
  • CVE-2026-7795

    Click to Chat <= 4.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'num' Shortcode Parameter

    holithemes · Click to Chat – HoliThemes

    Medium6.4
  • CVE-2025-5336

    Click to Chat <= 4.22 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via data-no_number Parameter

    holithemes · Click to Chat – HoliThemes

    Medium6.4
  • CVE-2024-9619

    WP SHAPES <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    holithemes · WP SHAPES

    Medium6.4
  • CVE-2024-3849

    Click to Chat – HoliThemes <= 3.35 - Authenticated (Contributor+) Local File Inclusion

    holithemes · Click to Chat – HoliThemes

    High8.8