Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

DevItems — Vulnerabilities & Security Advisories 12

Browse all 12 CVE security advisories affecting DevItems. AI-powered Chinese analysis, POCs, and references for each vulnerability.

DevItems is a software development platform providing tools for creating and managing digital assets. Historically, the platform has been vulnerable to multiple remote code execution, cross-site scripting, and privilege escalation vulnerabilities, accounting for its 10 recorded CVEs. Security assessments reveal that input validation flaws and improper access controls are recurring issues. While no major public security incidents have been documented, the consistent pattern of vulnerabilities suggests potential risks for organizations relying on the platform. Users should implement strict input sanitization and access restrictions to mitigate these known weaknesses.

CVE ID Title CVSS Severity Published
CVE-2026-94117 WordPress HashBar – WordPress Notification Bar plugin <= 2.0.3 - SQL Injection vulnerability — HashBar – WordPress Notification Bar CWE-89 7.6 High 2026-09-22
CVE-2026-66602 WordPress HashBar – WordPress Notification Bar plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability — HashBar – WordPress Notification Bar CWE-352 8.8 High 2026-08-18
CVE-2025-58990 WordPress ShopLentor Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability — ShopLentor CWE-79 6.5 Medium 2025-09-09
CVE-2025-58635 WordPress Support Genix Plugin <= 1.4.23 - Broken Access Control Vulnerability — Support Genix CWE-862 5.3 Medium 2025-09-03
CVE-2025-54695 WordPress HT Mega Plugin plugin <= 2.9.0 - Broken Access Control Vulnerability — HT Mega CWE-862 5.4 Medium 2025-08-14
CVE-2025-24624 WordPress HT Event – WordPress Event Manager Plugin for Elementor Plugin <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerability — HT Event CWE-79 7.1 High 2025-04-17
CVE-2025-30777 WordPress Support Genix plugin <= 1.4.11 - Insecure Direct Object References (IDOR) Vulnerability — Support Genix CWE-639 4.3 Medium 2025-03-27
CVE-2024-51673 WordPress HT Politic plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability — HT Politic CWE-79 6.5 Medium 2024-11-09
CVE-2024-49630 WordPress WP Education for Elementor plugin <= 1.2.8 - Stored Cross Site Scripting (XSS) vulnerability — WP Education CWE-79 6.5 Medium 2024-10-20
CVE-2024-38706 WordPress HT Mega plugin <= 2.5.7 - JSON Path Traversal vulnerability — HT Mega CWE-35 6.5 Medium 2024-07-12
CVE-2024-32782 WordPress HT Mega plugin <= 2.4.7 - Sensitive Data Exposure vulnerability — HT Mega CWE-201 4.3 Medium 2024-04-24
CVE-2024-30182 WordPress HT Mega – Absolute Addons For Elementor plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability — HT Mega CWE-79 6.5 Medium 2024-03-27

This page lists every published CVE security advisory associated with DevItems. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.