Skip to content
OpenAdvisories

Vendor

HashThemes

32 known vulnerabilities.

Products

Easy Elementor Addons 7 Hash Elements 5 Hash Form 4 Hash Form – Drag & Drop Form Builder 4 Total 3 Smart Blocks 2 HashThemes Demo Importer 2 Easy Elementor Addons – Addons Pack for Elementor Page Builder 1 Viral Mag 1 Viral News 1 Viral 1 HashOne 1 Square 1 Mini Ajax Cart for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2025-58973

    WordPress Easy Elementor Addons Plugin <= 2.2.8 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in hashthemes Easy Elementor Addons easy-elementor-addons allows PHP Local File Inclusion.This issue affects Easy Elementor Addons: from n/a …

    HashThemes Easy Elementor Addons
  • High 8.1
    CVE-2024-5085

    Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated PHP Object Injection

    The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1.0 via deserialization of untrusted input in the 'process_entry' function. This makes it possible for unauthenticated …

    HashThemes Hash Form – Drag & Drop Form Builder Web / CMS
  • High 8.1
    CVE-2021-39333

    Hashthemes Demo Importer <= 1.1.1 Improper Access Control Allowing Content Deletion

    The Hashthemes Demo Importer Plugin <= 1.1.1 for WordPress contained several AJAX functions which relied on a nonce which was visible to all logged-in users for access control, allowing them to execute a function that truncated nearly all database tables and …

    HashThemes HashThemes Demo Importer