Security
فارسی
All products

ht-mega-for-elementor

WordPress · Plugin
36 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM SinkCVE-2026-111318 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega Addons for Elementor <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'display_options' SettingCVE-2026-11895 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega 3.2.0 - 3.2.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-86788 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega Addons for Elementor – Elementor Widgets & Template Builder < 3.0.7 - Unauthenticated Information ExposureCVE-2026-4106 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown WidgetCVE-2024-12599 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega – Absolute Addons For Elementor <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tag Attribute InjectionCVE-2025-13141 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega <= 2.9.0 - Missing AuthorizationCVE-2025-54695 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator ActionsCVE-2025-8068 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information ExposureCVE-2025-8401 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File ActionsCVE-2025-8151 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsCVE-2025-1802 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown WidgetCVE-2025-1261 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_cssCVE-2024-12597 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_idCVE-2024-8910 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_productsCVE-2023-6214 ht-mega-for-elementor WordPress High Fix reported
HT Mega <= 2.5.7 - Authenticated (Contributor+) JSON File Directory TraversalCVE-2024-38706 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsCVE-2024-5215 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget SettingsCVE-2024-5173 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid WidgetCVE-2024-3308 ht-mega-for-elementor WordPress Medium Fix reported
HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory TraversalCVE-2024-1974 ht-mega-for-elementor WordPress High Fix reported