HM
Product
HT Mega Addons for Elementor – Elementor Widgets & Template Builder
by devitemsllc · last CVE Sep 30, 2026
8
CVEs
0
On KEV
6.4
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 9Low 0
Watch

Add HT Mega Addons for Elementor – Elementor Widgets & Template Builder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-11895
6.4
0%
Sep 30
HT Mega Addons for Elementor <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'display_options' Setting
Affected: through 3.1.1
CVE-2025-13141
6.4
0%
Nov 21
HT Mega – Absolute Addons For Elementor <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tag Attribute Injection
Affected: through 3.0.0
CVE-2024-12599
6.4
0%
Feb 11
HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Affected: through 2.8.1
CVE-2025-1802
5.4
0%
Mar 20
HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Affected: through 2.8.3
CVE-2025-1261
5.4
0%
Mar 8
HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget
Affected: through 2.8.2
CVE-2024-12597
5.4
0%
Feb 4
HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css
Affected: through 2.7.6
CVE-2025-8068
4.3
0%
Jul 31
HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions
Affected: through 2.9.1
CVE-2025-8401
4.3
0%
Jul 31
HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure
Affected: through 2.9.1
CVE-2025-8151
4.3
0%
Jul 31
HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions
Affected: through 2.9.1
Showing 9