8.8
High
CVE-2024-1974 The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Directory Traversal in all versions up…
Description
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.6 via the render function. This makes it possible for authenticated attackers, with contributor access or higher, to read the contents of arbitrary files on the server, which can contain sensitive information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HT Mega – Absolute Addons For Elementor 2.4 | earliest → 2.4.6 | No fix stated |
| ht_mega_-_absolute_addons_for_elementor_page_builder 2.4 | earliest → 2.4.6 | No fix stated |
| HT Mega Addons for Elementor – Elementor Widgets & Template Builder 2.4 | earliest → 2.4.6 | No fix stated |
Other CVEs of HT Mega – Absolute Addons For Elementor
The 24 CVEs of HT Mega – Absolute Addons For Elementor →
CVE-2025-13141
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
6.4
Medium
CVE-2025-8068
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification and loss…
4.3
Medium
CVE-2025-8401
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in…
4.3
Medium
CVE-2025-8151
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Path Traversal in all versions up…
4.3
Medium