htplugins
- Total products in the ecosystem
- 8
- Total vulnerabilities (90 days)
- 3
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
CyStack could not complete this security profile. The original vulnerability records remain available below.
As of 10/26/2026, htplugins recorded 3 security vulnerabilities in the last 90 days across 2 products, including 3 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, HT Contact Form – Drag & Drop Form Builder for WordPress had the most security vulnerabilities in the htplugins ecosystem, with 2 vulnerabilities—approximately 66.67% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-94589Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.4.5 - Unauthenticated Arbitrary File Upload via Signature Field File UploadCVE-2026-96326HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor FieldCVE-2026-93303HT Contact Form <= 2.10.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'form_data' Rich Text Field via Draft Save/ResumeCVE-2026-7052HT Contact Form <= 2.8.2 - Unauthenticated Stored Cross-Site Scripting via File Upload FieldCVE-2026-1888Docus <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes15 Results | Page 1 of 2
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| Published07/22/2025 |
| SeverityHigh |
| SeverityCritical |