WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
happy-helpdesk-support-ticket-system
Published
2025-08-19
Title
HAPPY – Helpdesk Support Ticket System < 1.0.7 - Missing Authorization
Slug
happy-helpdesk-support-ticket-system
Published
2025-10-25
Title
HAPPY < 1.0.8 - Unauthenticated Remote Code Execution
Slug
happy-helpdesk-support-ticket-system
Published
2025-12-12
Title
HAPPY – Helpdesk Support Ticket System < 1.0.10 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Ticket Reply
Slug
happy-helpdesk-support-ticket-system
Published
2025-12-23
Title
HAPPY < 1.0.10 - Missing Authorization
Slug
happy-helpdesk-support-ticket-system
Published
2026-01-27
Title
HAPPY < 1.0.9 - Missing Authorization
Slug
happy-helpdesk-support-ticket-system
Published
2026-04-16
Title
HAPPY – Helpdesk Support Ticket System < 1.0.11 - Missing Authorization
Slug
happy-scss-compiler
Published
2024-07-08
Title
Happy SCSS Compiler - Compile SCSS to CSS automatically <= 1.3.10 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
happyforms
Published
2023-01-13
Title
Happyforms < 1.22.0 - Contributor+ Stored XSS
Slug
happyforms
Published
2023-11-27
Title
Happyforms < 1.25.10 - Reflected Cross-Site Scripting
Slug
happyforms
Published
2024-01-31
Title
Happyforms < 1.25.11 - Missing Authorization
Slug
happyforms
Published
2024-08-29
Title
Happyforms < 1.26.1 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
happyforms
Published
2024-10-16
Title
Happyforms < 1.26.3 - Admin+ Stored XSS
Slug
happyforms
Published
2026-06-04
Title
Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms < 1.26.14 - Unauthenticated PHP Object Injection
Slug
happyforms
Published
2026-07-09
Title
HappyForms < 1.26.13 - Authenticated (Admin+) Local File Inclusion
Slug
hash-elements
Published
2024-03-28
Title
Hash Elements < 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
hash-elements
Published
2024-05-22
Title
Hash Elements < 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter in Multiple Widgets
Slug
hash-elements
Published
2024-11-12
Title
Hash Elements < 1.4.8 - Missing Authorization to Unauthenticated Draft Post Title Exposure
Slug
hash-elements
Published
2025-01-06
Title
Hash Elements < 1.5.1 - Contributor+ Stored XSS
Slug
hash-elements
Published
2026-06-12
Title
Hash Elements < 1.5.5 - Authenticated (Contributor+) Information Exposure
Slug
hash-form
Published
2024-05-22
Title
Hash Form – Drag & Drop Form Builder < 1.1.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution
Slug
hash-form
Published
2024-05-22
Title
Hash Form – Drag & Drop Form Builder < 1.1.1 - Unauthenticated PHP Object Injection
Slug
hash-form
Published
2024-10-04
Title
Hash Form - Drag & Drop Form Builder < 1.2.0 - Unauthenticated Limited File Upload
Slug
hash-form
Published
2024-12-11
Title
Hash Form < 1.2.2 - Missing Authorization to Authenticated (Contributor+) Form Style Creation
Slug
hash-form
Published
2025-05-07
Title
Hash Form < 1.2.9 - Cross-Site Request Forgery
Slug
hashbar-wp-notification-bar
Published
2022-12-27
Title
HashBar – WordPress Notification Bar < 1.3.6 - Contributor+ Stored XSS via Shortcode