Log in Start free

DevItems

Products

ProductCVEsExploitedLatest
HT Mega4–Aug 14, 2025
Support Genix3–Oct 18, 2026
HashBar – WordPress Notification Bar2–Sep 22, 2026
WP Education1–Oct 20, 2024
HT Politic1–Nov 9, 2024
HT Event1–Apr 17, 2025
ShopLentor1–Sep 9, 2025

Exploited and recent CVEs

  • CVE-2026-110895 High 8.5 WordPress Support Genix plugin <= 1.4.54 - SQL Injection vulnerability 0.3%
  • CVE-2026-94117 High 7.6 WordPress HashBar – WordPress Notification Bar plugin <= 2.0.3 - SQL Injection vulnerability 0.4%
  • CVE-2026-66602 High 8.8 WordPress HashBar – WordPress Notification Bar plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2025-58990 Medium 6.5 WordPress ShopLentor Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-58635 Medium 5.3 WordPress Support Genix Plugin <= 1.4.23 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-54695 Medium 5.4 WordPress HT Mega Plugin plugin <= 2.9.0 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-24624 High 7.1 WordPress HT Event – WordPress Event Manager Plugin for Elementor Plugin <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-30777 Medium 4.3 WordPress Support Genix plugin <= 1.4.11 - Insecure Direct Object References (IDOR) Vulnerability 0.5%
  • CVE-2024-51673 Medium 6.5 WordPress HT Politic plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-49630 Medium 6.5 WordPress WP Education for Elementor plugin <= 1.2.8 - Stored Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-38706 Medium 6.5 WordPress HT Mega plugin <= 2.5.7 - JSON Path Traversal vulnerability 0.7%
  • CVE-2024-32782 Medium 4.3 WordPress HT Mega plugin <= 2.4.7 - Sensitive Data Exposure vulnerability 0.9%
  • CVE-2024-30182 Medium 6.5 WordPress HT Mega – Absolute Addons For Elementor plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability 0.4%