Vulnerabilities in HasThemes

25 results
CVE-2025-22801MEDIUMWordPress Free WooCommerce Theme 99fy Extension plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2022-47172MEDIUMWordPress WooLentor Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2025-14054MEDIUMWC Builder <= 1.2.0 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'heading_color' Shortcode AttributeEPSS 0.2%CVE-2025-68533MEDIUMWordPress WC Builder plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2025-64271MEDIUMWordPress WP Plugin Manager plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%