Skip to content
Sign in
5.3 Medium

CVE-2026-4106 The HT Mega Addons for Elementor WordPress plugin before 3.0.7 contains an unauthenticated AJAX action returning some…

Description

The HT Mega Addons for Elementor WordPress plugin before 3.0.7 contains an unauthenticated AJAX action returning some PII (such as full name, city, state and country) of customers who placed orders in the last 7 days

Affected products and versions

Product Affected versions Fixed in
HT Mega Addons for Elementor 3.0 earliest → < 3.0.7 3.0.7

Other CVEs of HT Mega Addons for Elementor

The 2 CVEs of HT Mega Addons for Elementor →
CVE-2026-86788 The HT Mega Addons for Elementor WordPress plugin before 3.2.6 does not restrict the HTML tag name used to render the… 6.8 Medium
Track this CVE