Hasthemes Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/hasthemes/ Thu, 23 Feb 2023 14:07:44 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Hasthemes Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/hasthemes/ 32 32 CVE-2021-24261 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-24261/ Thu, 23 Feb 2023 14:07:44 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-24261/ The “HT Mega – Absolute Addons for Elementor Page Builder” WordPress Plugin before 1.5.7 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.

The post CVE-2021-24261 appeared first on CVE Vulnerability.

]]> The “HT Mega – Absolute Addons for Elementor Page Builder” WordPress Plugin before 1.5.7 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.

The post CVE-2021-24261 appeared first on CVE Vulnerability.

]]> CVE-2022-4650 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-4650/ Thu, 23 Feb 2023 05:21:36 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-4650/ The HashBar WordPress plugin before 1.3.6 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

The post CVE-2022-4650 appeared first on CVE Vulnerability.

]]> The HashBar WordPress plugin before 1.3.6 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

The post CVE-2022-4650 appeared first on CVE Vulnerability.

]]> CVE-2023-23899 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-23899/ Wed, 22 Feb 2023 14:02:26 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-23899 Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Extensions For CF7 plugin

The post CVE-2023-23899 appeared first on CVE Vulnerability.

]]> Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Extensions For CF7 plugin <= 2.0.8 versions leads to arbitrary plugin activation.

The post CVE-2023-23899 appeared first on CVE Vulnerability.

]]> CVE-2023-0231 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0231/ Wed, 22 Feb 2023 14:02:12 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0231 The ShopLentor WordPress plugin before 2.5.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

The post CVE-2023-0231 appeared first on CVE Vulnerability.

]]> The ShopLentor WordPress plugin before 2.5.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

The post CVE-2023-0231 appeared first on CVE Vulnerability.

]]> CVE-2023-0232 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0232/ Wed, 22 Feb 2023 14:02:12 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0232 The ShopLentor WordPress plugin before 2.5.4 unserializes user input from cookies in order to track viewed products and user data, which could lead to PHP Object Injection.

The post CVE-2023-0232 appeared first on CVE Vulnerability.

]]> The ShopLentor WordPress plugin before 2.5.4 unserializes user input from cookies in order to track viewed products and user data, which could lead to PHP Object Injection.

The post CVE-2023-0232 appeared first on CVE Vulnerability.

]]>