Devitems

12 CVEs across 7 Devitems products. Browse Devitems vulnerabilities, severities, and proof-of-concept exploits.

Devitems products with known CVEs

ProductCVEs
Ht Mega4
Hashbar – WordPress Notification Bar2
Support Genix2
Ht Event1
Ht Politic1
Shoplentor1
Wp Education1
Devitems CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-94117High7.62026-09-22Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems HashBar – WordPress Notification Bar allows Blin…
CVE-2026-66602High8.82026-08-18Cross-Site Request Forgery (CSRF) vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery. This issue affects HashBar…
CVE-2025-58990Medium6.52025-09-09Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems ShopLentor woolentor-addons allows Stored XSS.Th…
CVE-2025-58635Medium5.32025-09-03Missing Authorization vulnerability in DevItems Support Genix support-genix-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This i…
CVE-2025-54695Medium5.42025-08-14Missing Authorization vulnerability in DevItems HT Mega ht-mega-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…
CVE-2025-24624High7.12025-04-17Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems HT Event ht-event allows Reflected XSS.This issu…
CVE-2025-30777Medium4.32025-03-27Authorization Bypass Through User-Controlled Key vulnerability in DevItems Support Genix support-genix-lite allows Exploiting Incorrectly Configured Access Con…
CVE-2024-51673Medium6.52024-11-09Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems HT Politic wp-politic allows DOM-Based XSS.This…
CVE-2024-49630Medium6.52024-10-20Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems WP Education wp-education allows Stored XSS.This…
CVE-2024-38706Medium6.52024-07-12Path Traversal: '.../...//' vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through <= 2.5.7.
CVE-2024-32782Medium4.32024-04-24Insertion of Sensitive Information Into Sent Data vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through <= 2.4.7.
CVE-2024-30182Medium6.52024-03-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects…