Log in Start free

HashThemes

Products

ProductCVEsExploitedLatest
Easy Elementor Addons7–Aug 20, 2026
Hash Elements5–Jun 12, 2026
Hash Form – Drag & Drop Form Builder4–Dec 12, 2024
Hash Form4–Aug 31, 2026
Total3–May 2, 2026
HashThemes Demo Importer2–Jul 23, 2026
Smart Blocks2–Sep 22, 2025
Viral News1–Mar 25, 2024
Easy Elementor Addons – Addons Pack for Elementor Page Builder1–Oct 3, 2025
HashOne1–Mar 25, 2024
Mini Ajax Cart for WooCommerce1–Apr 15, 2026
Square1–Dec 9, 2024
Viral1–Mar 25, 2024
Viral Mag1–Dec 13, 2024

Exploited and recent CVEs

  • CVE-2026-81780 Critical 10.0 WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability 0.5%
  • CVE-2026-78292 Critical 9.8 WordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerability 0.6%
  • CVE-2026-78280 Medium 4.3 WordPress Hash Form plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2026-28164 Critical 9.6 WordPress Easy Elementor Addons plugin <= 2.3.7 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2026-65483 Medium 5.9 WordPress HashThemes Demo Importer plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-24618 Medium 4.3 WordPress Hash Elements plugin <= 1.5.4 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-5077 Medium 5.4 Total <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in Blog Section Image alt Attribute 0.2%
  • CVE-2026-6370 Medium 5.9 WordPress Mini Ajax Cart for WooCommerce plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2025-9045 Medium 6.4 Easy Elementor Addons <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2025-58973 High 7.5 WordPress Easy Elementor Addons Plugin <= 2.2.8 - Local File Inclusion Vulnerability 0.6%
  • CVE-2025-59561 Medium 4.3 WordPress Smart Blocks Plugin <= 2.4 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-54712 Medium 4.3 WordPress Easy Elementor Addons Plugin <= 2.2.7 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-54704 Medium 6.5 WordPress Easy Elementor Addons plugin <= 2.2.6 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-48295 Medium 6.5 WordPress Easy Elementor Addons plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-47468 Medium 4.3 WordPress Hash Form plugin <= 1.2.8 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-26912 Medium 6.5 WordPress Easy Elementor Addons plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-26761 Medium 6.5 WordPress Easy Elementor Addons plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-22296 Medium 6.5 WordPress Hash Elements plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-28990 Medium 4.3 WordPress Viral Mag theme <= 1.0.9 - Authenticated Arbitrary Plugin Activation Vulnerability 0.5%
  • CVE-2023-27456 Medium 4.3 WordPress Total theme <= 2.1.19 - Authenticated Arbitrary Plugin Activation 0.5%
  • CVE-2024-12201 Medium 4.3 Hash Form <= 1.2.1 - Missing Authorization to Authenticated (Contributor+) Form Style Creation 0.4%
  • CVE-2023-30486 Medium 4.3 WordPress Square theme <= 2.0.0 - Broken Access Control 0.8%
  • CVE-2024-10802 Medium 5.3 Hash Elements <= 1.4.7 - Missing Authorization to Unauthenticated Draft Post Title Exposure 0.6%
  • CVE-2024-49270 Medium 6.5 WordPress Smart Blocks plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-9417 Medium 6.1 Hash Form - Drag & Drop Form Builder <= 1.1.9 - Unauthenticated Limited File Upload 0.4%
  • CVE-2024-5084 Critical 9.8 Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution 50.9%
  • CVE-2024-5085 High 8.1 Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated PHP Object Injection 0.8%
  • CVE-2024-5177 Medium 6.4 Hash Elements <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter in Multiple Widgets 0.3%
  • CVE-2024-30426 Medium 6.5 WordPress Hash Elements plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-33923 Medium 4.3 Broken Access Control leading to Arbitrary Plugin Activation in multiple HashThemes themes 0.5%