Vulnerabilities > Hasthemes > High

DATE CVE VULNERABILITY TITLE RISK
2024-07-12 CVE-2024-38706 Unspecified vulnerability in Hasthemes HT Mega
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HasThemes HT Mega allows Path Traversal.This issue affects HT Mega: from n/a through 2.5.7.
network
low complexity
hasthemes
8.8
2024-02-29 CVE-2023-51529 Unspecified vulnerability in Hasthemes HT Mega
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Mega – Absolute Addons For Elementor.This issue affects HT Mega – Absolute Addons For Elementor: from n/a through 2.3.3.
network
low complexity
hasthemes
8.8
2023-07-17 CVE-2022-47172 Unspecified vulnerability in Hasthemes Woolentor - Woocommerce Elementor Addons + Builder
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor plugin <= 2.6.2 versions.
network
low complexity
hasthemes
8.8
2023-07-11 CVE-2023-23731 Unspecified vulnerability in Hasthemes Wishsuite
Cross-Site Request Forgery (CSRF) vulnerability in HasTheme WishSuite plugin <= 1.3.3 versions.
network
low complexity
hasthemes
8.8
2023-07-11 CVE-2023-23791 Unspecified vulnerability in Hasthemes HT Menu
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Menu plugin <= 1.2.1 versions.
network
low complexity
hasthemes
8.8
2023-07-11 CVE-2023-23803 Unspecified vulnerability in Hasthemes Justtables
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes JustTables plugin <= 1.4.9 versions.
network
low complexity
hasthemes
8.8
2023-07-11 CVE-2023-23792 Unspecified vulnerability in Hasthemes Swatchly
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Swatchly plugin <= 1.2.0 versions.
network
low complexity
hasthemes
8.8
2023-07-10 CVE-2023-23804 Cross-Site Request Forgery (CSRF) vulnerability in Hasthemes HT Feed
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Feed plugin <= 1.2.7 versions.
network
low complexity
hasthemes CWE-352
8.8
2023-06-15 CVE-2023-23802 Unspecified vulnerability in Hasthemes HT Easy GA4 (Google Analytics 4)
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Easy GA4 ( Google Analytics 4 ) plugin <= 1.0.6 versions.
network
low complexity
hasthemes
8.8
2023-04-06 CVE-2023-23801 Unspecified vulnerability in Hasthemes Really Simple Google TAG Manager
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Really Simple Google Tag Manager plugin <= 1.0.6 versions.
network
low complexity
hasthemes
8.8