8.8
Élevée
CVE-2024-1974 The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Directory Traversal in all versions up…
Description
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.6 via the render function. This makes it possible for authenticated attackers, with contributor access or higher, to read the contents of arbitrary files on the server, which can contain sensitive information.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HT Mega – Absolute Addons For Elementor 2.4 | premières → 2.4.6 | Pas de correctif indiqué |
| ht_mega_-_absolute_addons_for_elementor_page_builder 2.4 | premières → 2.4.6 | Pas de correctif indiqué |
| HT Mega Addons for Elementor – Elementor Widgets & Template Builder 2.4 | premières → 2.4.6 | Pas de correctif indiqué |
Autres CVE de HT Mega – Absolute Addons For Elementor
Les 24 CVE de HT Mega – Absolute Addons For Elementor →
CVE-2025-13141
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
6.4
Moyenne
CVE-2025-8068
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification and loss…
4.3
Moyenne
CVE-2025-8401
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in…
4.3
Moyenne
CVE-2025-8151
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Path Traversal in all versions up…
4.3
Moyenne