Vulnerabilities in holithemes
5 resultsCVE-2024-3849HIGHClick to Chat – HoliThemes <= 3.35 - Authenticated (Contributor+) Local File InclusionEPSS 1.7%CVE-2026-92097CRITICALClick to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} PlaceholderEPSS 0.5%CVE-2026-7795MEDIUMClick to Chat <= 4.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'num' Shortcode ParameterEPSS 0.4%CVE-2024-9619MEDIUMWP SHAPES <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadEPSS 0.3%CVE-2025-5336MEDIUMClick to Chat <= 4.22 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via data-no_number ParameterEPSS 0.3%