Vulnerabilities in hashthemes

28 results
Vexday analysis

HashThemes apresenta 19 vulnerabilidades conhecidas na base, sendo 1 crítica e nenhuma em ataque ativo no momento. A fraqueza predominante é Cross-Site Scripting (CWE-79), típica de plugins e temas WordPress, com apenas 1 CVE publicado nos últimos 90 dias, indicando risco contido mas que requer monitoramento de patches, especialmente para a falha crítica.

CVE-2025-48295MEDIUMWordPress Easy Elementor Addons plugin <= 2.2.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-5077MEDIUMTotal <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in Blog Section Image alt AttributeEPSS 0.2%CVE-2025-54712MEDIUMWordPress Easy Elementor Addons Plugin <= 2.2.7 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-54704MEDIUMWordPress Easy Elementor Addons plugin <= 2.2.6 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-24618MEDIUMWordPress Hash Elements plugin <= 1.5.4 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-65483MEDIUMWordPress HashThemes Demo Importer plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-47468MEDIUMWordPress Hash Form plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2026-6370MEDIUMWordPress Mini Ajax Cart for WooCommerce plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%