Skip to content
OpenAdvisories

Vendor

DevItems

13 known vulnerabilities.

Products

HT Mega 4 Support Genix 3 HashBar – WordPress Notification Bar 2 HT Event 1 ShopLentor 1 HT Politic 1 WP Education 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.5
    CVE-2026-110895

    WordPress Support Genix plugin <= 1.4.54 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems Support Genix support-genix-lite allows SQL Injection.This issue affects Support Genix: from n/a through 1.4.54.

    DevItems Support Genix
  • High 7.6
    CVE-2026-94117

    WordPress HashBar – WordPress Notification Bar plugin <= 2.0.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems HashBar – WordPress Notification Bar allows Blind SQL Injection. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.3.

    DevItems HashBar – WordPress Notification Bar Web / CMS
  • High 8.8
    CVE-2026-66602

    WordPress HashBar – WordPress Notification Bar plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0.

    DevItems HashBar – WordPress Notification Bar Web / CMS
  • High 7.1
    CVE-2025-24624

    WordPress HT Event – WordPress Event Manager Plugin for Elementor Plugin <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems HT Event ht-event allows Reflected XSS.This issue affects HT Event: from n/a through <= 1.4.6.

    DevItems HT Event