Log in Start free

holithemes

Products

ProductCVEsExploitedLatest
Click to Chat – HoliThemes4–Oct 14, 2026
WP SHAPES1–Dec 20, 2024

Exploited and recent CVEs

  • CVE-2026-92097 Critical 9.1 Click to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder 0.5%
  • CVE-2026-7795 Medium 6.4 Click to Chat <= 4.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'num' Shortcode Parameter 0.4%
  • CVE-2025-5336 Medium 6.4 Click to Chat <= 4.22 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via data-no_number Parameter 0.3%
  • CVE-2024-9619 Medium 6.4 WP SHAPES <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
  • CVE-2024-3849 High 8.8 Click to Chat – HoliThemes <= 3.35 - Authenticated (Contributor+) Local File Inclusion 1.7%