Log in Start free

HT Plugins

Products

ProductCVEsExploitedLatest
HT Contact Form 73–May 27, 2026
HT Mega – Absolute Addons for WPBakery Page Builder2–Sep 22, 2025
Extensions For CF72–Feb 3, 2026
HT Team Member1–Jun 6, 2025
Insert Headers and Footers Code – HT Script1–Jul 27, 2026
WishSuite1–Mar 27, 2025
HT Feed1–Sep 26, 2025
HT Slider For Elementor1–Jun 27, 2025

Exploited and recent CVEs

  • CVE-2026-66474 Medium 4.3 WordPress Insert Headers and Footers Code – HT Script plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2026-42728 High 7.1 WordPress HT Contact Form 7 plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-24991 Medium 5.3 WordPress Extensions For CF7 plugin <= 3.4.0 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2025-60147 Medium 6.5 WordPress HT Feed Plugin <= 1.3.0 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-53463 Medium 6.5 WordPress HT Mega – Absolute Addons for WPBakery Page Builder Plugin <= 1.0.9 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-54015 Medium 6.6 WordPress HT Contact Form 7 plugin <= 2.0.0 - Local File Inclusion Vulnerability 0.6%
  • CVE-2025-53206 Medium 6.5 WordPress HT Mega – Absolute Addons for WPBakery Page Builder plugin <= 1.0.8 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-53199 Medium 6.5 WordPress HT Slider For Elementor plugin <= 1.6.5 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-49309 Medium 6.5 WordPress HT Team Member plugin <= 1.1.7 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-30820 High 7.5 WordPress WishSuite plugin <= 1.4.4 - Local File Inclusion Vulnerability 1.1%
  • CVE-2025-24726 Medium 6.5 WordPress Contact Form 7 Widget plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-24695 Medium 4.4 WordPress Extensions For CF7 Plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerability 0.4%