Vulnerabilidades en HT Plugins
12 resultadosAnálisis Vexday
HT Plugins apresenta 12 vulnerabilidades catalogadas, com 2 divulgações nos últimos 90 dias, porém nenhuma sob ataque ativo conhecido e sem críticas identificadas. A fraqueza dominante é Cross-Site Scripting (CWE-79), típica de aplicações web, que demanda atenção no ciclo de desenvolvimento mas não caracteriza um risco imediato de exploração em massa.
CVE-2025-30820HIGHWordPress WishSuite plugin <= 1.4.4 - Local File Inclusion VulnerabilityEPSS 1.0%CVE-2025-54015MEDIUMWordPress HT Contact Form 7 plugin <= 2.0.0 - Local File Inclusion VulnerabilityEPSS 0.4%CVE-2025-24695MEDIUMWordPress Extensions For CF7 Plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.3%CVE-2025-24726MEDIUMWordPress Contact Form 7 Widget plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-53463MEDIUMWordPress HT Mega – Absolute Addons for WPBakery Page Builder Plugin <= 1.0.9 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2025-49309MEDIUMWordPress HT Team Member plugin <= 1.1.7 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-53206MEDIUMWordPress HT Mega – Absolute Addons for WPBakery Page Builder plugin <= 1.0.8 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-24991MEDIUMWordPress Extensions For CF7 plugin <= 3.4.0 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2025-53199MEDIUMWordPress HT Slider For Elementor plugin <= 1.6.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-60147MEDIUMWordPress HT Feed Plugin <= 1.3.0 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-42728HIGHWordPress HT Contact Form 7 plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-66474MEDIUMWordPress Insert Headers and Footers Code – HT Script plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%