HT Mega Addons for Elementor – Elementor Widgets & Template Builder

Güvenlik açıkları

• CVE-2023-37999kimlik doğrulamasız≤ 2.2.0

  WordPress HT Mega Absolute Addons for Elementor plugin <= 2.2.0 - Unauthenticated Privilege Escalation vulnerability

  Kritik 9.8

• CVE-2023-51529kimlik doğrulamasız · tıklama gerekir≤ 2.3.3

  WordPress HT Mega Plugin <= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2024-38706giriş gerekir≤ 2.5.7

  WordPress HT Mega plugin <= 2.5.7 - JSON Path Traversal vulnerability

  Yüksek 8.8

• CVE-2023-6214kimlik doğrulamasız≤ 2.4.6

  HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_products

  Yüksek 7.5

• CVE-2024-32782giriş gerekir≤ 2.4.7

  WordPress HT Mega plugin <= 2.4.7 - Sensitive Data Exposure vulnerability

  Orta 6.5

• CVE-2024-1974katılımcı+≤ 2.4.6

  HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal

  Orta 6.5

• CVE-2024-12599katılımcı+≤ 2.8.1

  HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

  Orta 6.4

• CVE-2023-50901kimlik doğrulamasız · tıklama gerekir≤ 2.3.8

  WordPress HT Mega Plugin <= 2.3.8 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2025-54695giriş gerekir≤ 2.9.0

  WordPress HT Mega Plugin plugin <= 2.9.0 - Broken Access Control Vulnerability

  Orta 5.4

• CVE-2024-30182giriş gerekir≤ 2.4.3

  WordPress HT Mega – Absolute Addons For Elementor plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2025-1802katılımcı+≤ 2.8.3

  HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

  Orta 5.4

• CVE-2025-1261katılımcı+≤ 2.8.2

  HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget

  Orta 5.4

• CVE-2024-12597katılımcı+≤ 2.7.6

  HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css

  Orta 5.4

• CVE-2024-5215katılımcı+≤ 2.5.5

  HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

  Orta 5.4

• CVE-2024-5173katılımcı+≤ 2.5.5

  HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settings

  Orta 5.4

• CVE-2024-4876katılımcı+≤ 2.5.2

  HT Mega – Absolute Addons For Elementor <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-3990katılımcı+≤ 2.5.0

  HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip & Popover Widget

  Orta 5.4

• CVE-2024-3989katılımcı+≤ 2.5.0

  HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justify

  Orta 5.4

• CVE-2024-3308katılımcı+≤ 2.4.9

  HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid Widget

  Orta 5.4

• CVE-2024-3307katılımcı+≤ 2.4.9

  HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

  Orta 5.4

• CVE-2024-2790katılımcı+≤ 2.4.8

  HT Mega – Absolute Addons For Elementor <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQ

  Orta 5.4

• CVE-2024-2085katılımcı+≤ 2.4.6

  HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size'

  Orta 5.4

• CVE-2024-1421katılımcı+≤ 2.4.4

  HT Mega – Absolute Addons For Elementor <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel Widget

  Orta 5.4

• CVE-2024-1397katılımcı+≤ 2.4.6

  HT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTag

  Orta 5.4

• CVE-2024-4875abone+≤ 2.5.2

  HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update

  Orta 4.3

• CVE-2025-8401yazar+≤ 2.9.1

  HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure

  Orta 4.3

• CVE-2025-8151yazar+≤ 2.9.1

  HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions

  Orta 4.3

• CVE-2025-8068katılımcı+≤ 2.9.1

  HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions

  Orta 4.3

• CVE-2024-8910katılımcı+≤ 2.6.5

  HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id

  Orta 4.3