HM
Product
HT Mega
30
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 26Low 0
Watch
Add HT Mega to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-32782 | 6.5 | Apr 24 | Insertion of Sensitive Information Into Sent Data vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through <= 2.4.7 Affected: before 2.4.8 |
| CVE-2024-1974 | 6.5 | Apr 9 | The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.6 via the render function Affected: before 2.4.7 |
| CVE-2024-12599 | 6.4 | Feb 11 | HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget Affected: through 2.8.1 |
| CVE-2023-50901 | 6.1 | Dec 29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Mega – Absolute Addons For Elementor allows Reflected XSS.This… Affected: through 2.3.8 |
| CVE-2025-1802 | 5.4 | Mar 20 | HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Affected: before 2.8.4 |
| CVE-2025-1261 | 5.4 | Mar 8 | HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget Affected: through 2.8.2 |
| CVE-2024-12597 | 5.4 | Feb 4 | HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css Affected: before 2.7.7 |
| CVE-2024-5215 | 5.4 | Jun 26 | The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 2.5.5 due… Affected: before 2.5.6 |
| CVE-2024-5173 | 5.4 | Jun 26 | The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Video player widget settings in all versions up to, and… Affected: before 2.5.6 |
| CVE-2024-4876 | 5.4 | May 21 | The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘popover_header_text’ parameter in versions up to, and… Affected: before 2.5.3 |
| CVE-2024-3990 | 5.4 | May 14 | The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Tooltip & Popover Widget in all versions up to, and… Affected: before 2.5.1 |
| CVE-2024-3989 | 5.4 | May 14 | The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Gallery Justify Widget in all versions up to, and… Affected: before 2.5.1 |
| CVE-2024-3308 | 5.4 | May 2 | The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid widget's attributes in all versions up to, and… Affected: before 2.5.0 |
| CVE-2024-3307 | 5.4 | May 2 | The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown widget's attributes in all versions up to, and… Affected: before 2.5.0 |
| CVE-2024-2790 | 5.4 | May 2 | The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Accordion widget in all versions up to, and including, 2.4.8 due… Affected: before 2.4.9 |
| CVE-2024-2085 | 5.4 | May 2 | The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'size' value in several widgets all versions up to, and… Affected: before 2.4.7 |
| CVE-2024-2084 | 5.4 | May 2 | The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's lightbox widget in all versions up to, and… Affected: before 2.4.7 |
| CVE-2024-30182 | 5.4 | Mar 27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a… Affected: before 2.4.4 |
| CVE-2024-1421 | 5.4 | Mar 12 | The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘border_type’ attribute of the Post Carousel widget in all… Affected: through 2.4.4 |
| CVE-2024-1397 | 5.4 | Mar 12 | The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocks in all versions up to, and including, 2.4.6… Affected: before 2.4.7 |
| CVE-2021-24261 | 5.4 | May 5 | The “HT Mega – Absolute Addons for Elementor Page Builder” WordPress Plugin before 1.5.7 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by… Affected: before 1.5.7 |
| CVE-2025-8068 | 4.3 | Jul 31 | HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions Affected: before 2.9.2 |
| CVE-2025-8401 | 4.3 | Jul 31 | HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure Affected: before 2.9.2 |
| CVE-2025-8151 | 4.3 | Jul 31 | HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions Affected: before 2.9.2 |
| CVE-2024-8910 | 4.3 | Sep 25 | The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.5 via the render… Affected: before 2.6.6 |
| CVE-2024-4875 | 4.3 | May 21 | The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification of data|loss of data due to a missing capability check on the… Affected: before 2.5.3 |
Showing 26