holithemes vulnerabilities
5 published CVEs name holithemes among the affected products.
- 5Published CVEs5 of them scored
- 2Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-92097
Click to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder
holithemes · Click to Chat – HoliThemes
Critical9.1 - CVE-2026-7795
Click to Chat <= 4.39 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'num' Shortcode Parameter
holithemes · Click to Chat – HoliThemes
Medium6.4 - CVE-2025-5336
Click to Chat <= 4.22 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via data-no_number Parameter
holithemes · Click to Chat – HoliThemes
Medium6.4 - CVE-2024-9619
WP SHAPES <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
holithemes · WP SHAPES
Medium6.4 - CVE-2024-3849
Click to Chat – HoliThemes <= 3.35 - Authenticated (Contributor+) Local File Inclusion
holithemes · Click to Chat – HoliThemes
High8.8