Hasthemes Ht Mega vulnerabilities

• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions CVE-2025-8068 4.3 MediumJuly 31, 2025
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure CVE-2025-8401 4.3 MediumJuly 31, 2025
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions CVE-2025-8151 4.3 MediumJuly 31, 2025
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets CVE-2025-1802 6.4 MediumMarch 20, 2025
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget CVE-2025-1261 6.4 MediumMarch 8, 2025
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget CVE-2024-12599 6.4 MediumFebruary 11, 2025
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css CVE-2024-12597 6.4 MediumFebruary 4, 2025
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id CVE-2024-8910 4.3 MediumSeptember 25, 2024
• devitems ht mega WordPress HT Mega plugin <= 2.5.7 - JSON Path Traversal vulnerability CVE-2024-38706 6.5 MediumJuly 12, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets CVE-2024-5215 6.4 MediumJune 26, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settings CVE-2024-5173 6.4 MediumJune 26, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-4876 6.4 MediumMay 21, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update CVE-2024-4875 Public exploit 4.3 MediumMay 21, 2024
• hastech ht mega, hasthemes ht mega - absolute addons for elementor page builder +1 more WordPress HT Mega Absolute Addons for Elementor plugin <= 2.2.0 - Unauthenticated Privilege Escalation vulnerability CVE-2023-37999 9.8 CriticalMay 17, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip & Popover Widget CVE-2024-3990 6.4 MediumMay 9, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justify CVE-2024-3989 6.4 MediumMay 9, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget CVE-2024-3307 6.4 MediumMay 2, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox Widget CVE-2024-2084 6.4 MediumMay 2, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_products CVE-2023-6214 7.5 HighMay 2, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQ CVE-2024-2790 6.4 MediumMay 2, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid Widget CVE-2024-3308 6.4 MediumMay 2, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' CVE-2024-2085 6.4 MediumMay 2, 2024
• devitems ht mega WordPress HT Mega plugin <= 2.4.7 - Sensitive Data Exposure vulnerability CVE-2024-32782 4.3 MediumApril 24, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder, hasthemes ht mega - absolute addons for elementor page builder +2 more HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal CVE-2024-1974 8.8 HighApril 9, 2024
• devitems ht mega WordPress HT Mega – Absolute Addons For Elementor plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-30182 6.5 MediumMarch 27, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega – Absolute Addons For Elementor <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel Widget CVE-2024-1421 6.4 MediumMarch 12, 2024
• hasthemes ht mega, devitemsllc ht mega addons for elementor – elementor widgets & template builder +1 more HT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTag CVE-2024-1397 6.4 MediumMarch 12, 2024
• devitemsllc ht mega – absolute addons for elementor, hasthemes ht mega +1 more WordPress HT Mega Plugin <= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-51529 4.3 MediumFebruary 29, 2024
• devitemsllc ht mega – absolute addons for elementor, hasthemes ht mega +1 more WordPress HT Mega Plugin <= 2.3.8 is vulnerable to Cross Site Scripting (XSS) CVE-2023-50901 7.1 HighDecember 29, 2023
• hasthemes ht mega, unknown ht mega – absolute addons for elementor page builder +1 more HT Mega - Absolute Addons for Elementor Page Builder < 1.5.7 - Contributor+ Stored XSS CVE-2021-24261 5.4 MediumMay 5, 2021