HT Mega Addons for Elementor – Elementor Widgets & Template Builder

Уязвимости

• CVE-2023-37999без авторизации≤ 2.2.0

  WordPress HT Mega Absolute Addons for Elementor plugin <= 2.2.0 - Unauthenticated Privilege Escalation vulnerability

  Критич. 9.8

• CVE-2023-51529без авторизации · нужен клик≤ 2.3.3

  WordPress HT Mega Plugin <= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2024-38706нужен вход≤ 2.5.7

  WordPress HT Mega plugin <= 2.5.7 - JSON Path Traversal vulnerability

  Высокий 8.8

• CVE-2023-6214без авторизации≤ 2.4.6

  HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_products

  Высокий 7.5

• CVE-2024-32782нужен вход≤ 2.4.7

  WordPress HT Mega plugin <= 2.4.7 - Sensitive Data Exposure vulnerability

  Средний 6.5

• CVE-2024-1974участник+≤ 2.4.6

  HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal

  Средний 6.5

• CVE-2024-12599участник+≤ 2.8.1

  HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

  Средний 6.4

• CVE-2023-50901без авторизации · нужен клик≤ 2.3.8

  WordPress HT Mega Plugin <= 2.3.8 is vulnerable to Cross Site Scripting (XSS)

  Средний 6.1

• CVE-2025-54695нужен вход≤ 2.9.0

  WordPress HT Mega Plugin plugin <= 2.9.0 - Broken Access Control Vulnerability

  Средний 5.4

• CVE-2024-30182нужен вход≤ 2.4.3

  WordPress HT Mega – Absolute Addons For Elementor plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2025-1802участник+≤ 2.8.3

  HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

  Средний 5.4

• CVE-2025-1261участник+≤ 2.8.2

  HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget

  Средний 5.4

• CVE-2024-12597участник+≤ 2.7.6

  HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css

  Средний 5.4

• CVE-2024-5215участник+≤ 2.5.5

  HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

  Средний 5.4

• CVE-2024-5173участник+≤ 2.5.5

  HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settings

  Средний 5.4

• CVE-2024-4876участник+≤ 2.5.2

  HT Mega – Absolute Addons For Elementor <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-3990участник+≤ 2.5.0

  HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip & Popover Widget

  Средний 5.4

• CVE-2024-3989участник+≤ 2.5.0

  HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justify

  Средний 5.4

• CVE-2024-3308участник+≤ 2.4.9

  HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid Widget

  Средний 5.4

• CVE-2024-3307участник+≤ 2.4.9

  HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

  Средний 5.4

• CVE-2024-2790участник+≤ 2.4.8

  HT Mega – Absolute Addons For Elementor <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQ

  Средний 5.4

• CVE-2024-2085участник+≤ 2.4.6

  HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size'

  Средний 5.4

• CVE-2024-1421участник+≤ 2.4.4

  HT Mega – Absolute Addons For Elementor <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel Widget

  Средний 5.4

• CVE-2024-1397участник+≤ 2.4.6

  HT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTag

  Средний 5.4

• CVE-2024-4875подписчик+≤ 2.5.2

  HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update

  Средний 4.3

• CVE-2025-8401автор+≤ 2.9.1

  HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure

  Средний 4.3

• CVE-2025-8151автор+≤ 2.9.1

  HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions

  Средний 4.3

• CVE-2025-8068участник+≤ 2.9.1

  HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions

  Средний 4.3

• CVE-2024-8910участник+≤ 2.6.5

  HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id

  Средний 4.3