Hasthemes
C
CAUTION
21
Total CVEs
5
Crit / High
16
Medium
0%
Unpatched
0%
Patched
6.3
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB
How we collect data →
CVE Trend by Year
Patch Coverage
✓ 0 patched ✗ 0 unpatched ~ 12 under review
Intelligence by Audience
PoC Available
12 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"hasthemes" port:443
org:"Hasthemes" http.status:200
Top EPSS (Exploitation Probability)
Quick Facts for Reporting
Total CVEs tracked
21
Critical severity
1
Actively exploited (CISA)
0
Unpatched ratio
0%
Avg CVSS score
6.3
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-06-14
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-06-14
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
Security News Google News
No recent security news found for Hasthemes.
Recent CVEs
showing 20 of 12
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2025-68533 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.03% | 2025-12-24 |
| CVE-2025-64271 PoC | 4.3 MEDIUM | PATCH UNDER REVIEW | 0.01% | 2025-11-13 |
| CVE-2025-58990 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.04% | 2025-09-09 |
| CVE-2025-26917 PoC | 7.1 HIGH | PATCH UNDER REVIEW | 0.20% | 2025-03-03 |
| CVE-2025-24695 PoC | 4.4 MEDIUM | PATCH UNDER REVIEW | 0.05% | 2025-01-24 |
| CVE-2025-22801 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.18% | 2025-01-09 |
| CVE-2024-51673 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.21% | 2024-11-09 |
| CVE-2024-51682 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.29% | 2024-11-04 |
| CVE-2024-49630 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.14% | 2024-10-20 |
| CVE-2024-38706 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 1.23% | 2024-07-12 |
| CVE-2024-32782 PoC | 4.3 MEDIUM | PATCH UNDER REVIEW | 3.75% | 2024-04-24 |
| CVE-2024-30182 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.19% | 2024-03-27 |
Intel
HQDhaka, Bangladesh
CountryBangladesh
LicenseProprietary
Trust ScoreC — CAUTION
Max CVSS9.8
Last Updated2026-06-14
Top Weaknesses
CWE-79
Cross-Site Scripting (XSS)
15 occurrences in Hasthemes CVEs
(71% of total)
CWE-352
Cross-Site Request Forgery (CSRF)
2 occurrences in Hasthemes CVEs
(10% of total)
CWE-201
Unknown Weakness Type
1 occurrence in Hasthemes CVEs
(5% of total)
CWE-918
Server-Side Request Forgery (SSRF)
1 occurrence in Hasthemes CVEs
(5% of total)
CWE-269
Improper Privilege Management
1 occurrence in Hasthemes CVEs
(5% of total)
CWE-35
Unknown Weakness Type
1 occurrence in Hasthemes CVEs
(5% of total)
Company Profile
Hasthemes is a Bangladeshi company that develops and sells WordPress themes and plugins, primarily through marketplaces like ThemeForest. Their products are used by website owners and developers, and the company's cybersecurity relevance stems from the potential for vulnerabilities in their commercial themes and plugins to affect a large number of WordPress sites.
Response Metrics
Est. MTTR ⓘ
~500 days
(Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -54% better
CVE count 2025 vs 2024:
13 → 6 CVEs
Patch Speed ⓘ Poor (>65% open)
0% of CVEs still unpatched.
Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
Financial Risk Estimate
Est. GDPR Low
€581K
Est. GDPR High
€5.8M
Based on 1 critical CVEs, 0 CISA KEV, 95% unpatched. Model: GDPR Art.83 · not legal advice.
Actions
Embed Badge
Hasthemes C valtersit.com