HT Plugins vulnerabilities
We track 2 vulnerabilities in HT Plugins products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 27, 2026.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest HT Plugins vulnerabilities
- 7.1 High severity
HT Contact Form 7: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Contact Form 7 ht-contactform allows Stored XSS.This issue affects HT Contact Form 7: from n/a through <= 2.8.2.
- 7.5 High severity
WishSuite: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in HT Plugins WishSuite wishsuite allows PHP Local File Inclusion.This issue affects WishSuite: from n/a through <= 1.4.4.