Vulnerabilities in HashThemes

28 results
Vexday analysis

HashThemes apresenta um perfil de risco baixo com 7 vulnerabilidades catalogadas, nenhuma sob exploração ativa atualmente e sem casos críticos identificados. A fraqueza predominante é controle de acesso inadequado (CWE-862), indicando deficiências na autorização de recursos, com apenas 1 vulnerabilidade divulgada nos últimos 90 dias sugerindo um ritmo moderado de descobertas.

CVE-2025-48295MEDIUMWordPress Easy Elementor Addons plugin <= 2.2.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-5077MEDIUMTotal <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in Blog Section Image alt AttributeEPSS 0.2%CVE-2025-54712MEDIUMWordPress Easy Elementor Addons Plugin <= 2.2.7 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-54704MEDIUMWordPress Easy Elementor Addons plugin <= 2.2.6 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-24618MEDIUMWordPress Hash Elements plugin <= 1.5.4 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-65483MEDIUMWordPress HashThemes Demo Importer plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-47468MEDIUMWordPress Hash Form plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2026-6370MEDIUMWordPress Mini Ajax Cart for WooCommerce plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%