Skip to content
OpenAdvisories

Vendor

DevItems

13 known vulnerabilities.

Products

HT Mega 4 Support Genix 3 HashBar – WordPress Notification Bar 2 HT Event 1 ShopLentor 1 HT Politic 1 WP Education 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-58990

    WordPress ShopLentor Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems ShopLentor woolentor-addons allows Stored XSS.This issue affects ShopLentor: from n/a through <= 3.2.0.

    DevItems ShopLentor
  • Medium 5.3
    CVE-2025-58635

    WordPress Support Genix Plugin <= 1.4.23 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in DevItems Support Genix support-genix-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Support Genix: from n/a through <= 1.4.23.

    DevItems Support Genix
  • Medium 5.4
    CVE-2025-54695

    WordPress HT Mega Plugin plugin <= 2.9.0 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in DevItems HT Mega ht-mega-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HT Mega: from n/a through <= 2.9.0.

    DevItems HT Mega
  • Medium 4.3
    CVE-2025-30777

    WordPress Support Genix plugin <= 1.4.11 - Insecure Direct Object References (IDOR) Vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in DevItems Support Genix support-genix-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Support Genix: from n/a through <= 1.4.11.

    DevItems Support Genix
  • Medium 6.5
    CVE-2024-51673

    WordPress HT Politic plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems HT Politic wp-politic allows DOM-Based XSS.This issue affects HT Politic: from n/a through <= 2.4.4.

    DevItems HT Politic
  • Medium 6.5
    CVE-2024-49630

    WordPress WP Education for Elementor plugin <= 1.2.8 - Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems WP Education wp-education allows Stored XSS.This issue affects WP Education: from n/a through <= 1.2.8.

    DevItems WP Education
  • Medium 6.5
    CVE-2024-38706

    WordPress HT Mega plugin <= 2.5.7 - JSON Path Traversal vulnerability

    Path Traversal: '.../...//' vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through <= 2.5.7.

    DevItems HT Mega
  • Medium 4.3
    CVE-2024-32782

    WordPress HT Mega plugin <= 2.4.7 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through <= 2.4.7.

    DevItems HT Mega
  • Medium 6.5
    CVE-2024-30182

    WordPress HT Mega – Absolute Addons For Elementor plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through <= 2.4.3.

    DevItems HT Mega