Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
HashthemesHash Elements

4 matches found

CVE
CVE•added 2024/11/13 3:20 a.m.•81 views

CVE-2024-10802

CVE-2024-10802 : WordPress Hash Elements plugin vulnerable to unauthorized access due to a missing capability check on hash_elements_get_posts_title_by_id() in all versions

5.3CVSS5.1AI score0.00614EPSS
CVE
CVE•added 2024/05/23 5:32 a.m.•78 views

CVE-2024-5177

CVE-2024-5177 — Hash Elements (WordPress) : A stored XSS vulnerability via the url parameter in multiple widgets affects all versions up to 1.3.8. Exploitation requires authenticated access (contributor+). Wordfence notes the patch status as Patched; remediation is to apply the update where avail...

6.4CVSS5.9AI score0.00314EPSS
CVE
CVE•added 2024/03/29 1:21 p.m.•77 views

CVE-2024-30426

CVE-2024-30426 stems from an Improper Neutralization of Input During Web Page Generation (Stored XSS) in the WordPress plugin Hash Elements (Hash Themes). The vulnerability affects Hash Elements versions from n/a up to and including 1.3.3, enabling stored cross-site scripting via input that is no...

6.5CVSS8.6AI score0.00348EPSS
CVE
CVE•added 2025/01/07 4:56 p.m.•67 views

CVE-2025-22296

CVE-2025-22296 describes a Cross‑Site Scripting (XSS) vulnerability in WordPress Hash Elements (HashThemes) plugin. Affected versions are 1.4.9 and earlier, with the root cause being improper neutralization of input during web page generation. The impact is XSS exposure via user-supplied data. Re...

6.5CVSS7.2AI score0.00241EPSS