Skip to content
OpenAdvisories

Vendor

htplugins

15 known vulnerabilities.

Products

HT Contact Form – Drag & Drop Form Builder for WordPress 6 Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) 2 Insert Headers and Footers Code – HT Script 2 Docus – YouTube Video Playlist 1 HT Slider For Elementor 1 WishSuite – Wishlist for WooCommerce 1 WP Team – WordPress Team Member Plugin 1 HT Easy GA4 – Google Analytics WordPress Plugin 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-1888

    Docus <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

    The Docus – YouTube Video Playlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'docusplaylist' shortcode in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping on user supplied attr…

    htplugins Docus – YouTube Video Playlist Web / CMS
  • Medium 6.4
    CVE-2025-13838

    WishSuite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute

    The WishSuite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'button_text' parameter of the 'wishsuite_button' shortcode in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping. This ma…

    htplugins WishSuite – Wishlist for WooCommerce Web / CMS
  • Medium 6.4
    CVE-2025-14278

    HT Slider for Elementor <= 1.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The HT Slider for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slide_title' parameter in all versions up to, and including, 1.7.4 due to insufficient input sanitization and output escaping in JavaScript. This makes it p…

    htplugins HT Slider For Elementor Web / CMS
  • Medium 6.4
    CVE-2025-12112

    Insert Headers and Footers Code – HT Script <= 1.1.6 - Authenticated (Author+) Stored Cross-Site Scripting

    The Insert Headers and Footers Code – HT Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via adding scripts in all versions up to, and including, 1.1.6 due to insufficient capability checks. This makes it possible for authenticated at…

    htplugins Insert Headers and Footers Code – HT Script Web / CMS
  • Medium 6.5
    CVE-2025-2779

    Insert Headers and Footers Code – HT Script <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

    The Insert Headers and Footers Code – HT Script plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_dismiss function in all versions up to, and including, 1.1.2. This makes it possible for auth…

    htplugins Insert Headers and Footers Code – HT Script Web / CMS
  • Medium 6.4
    CVE-2024-10223

    HT Team Member <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via htteamember Shortcode

    The WP Team – WordPress Team Member Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's htteamember shortcode in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping on user …

    htplugins WP Team – WordPress Team Member Plugin Web / CMS
  • Medium 5.3
    CVE-2024-1176

    HT Easy GA4 – Google Analytics WordPress Plugin <= 1.1.5 - Missing Authorization to Unauthenticated GA4 Email Update

    The HT Easy GA4 – Google Analytics WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the login() function in all versions up to, and including, 1.1.5. This makes it possible for unaut…

    htplugins HT Easy GA4 – Google Analytics WordPress Plugin Web / CMS