devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder

• CVE-2026-111318 Medium 5.4 HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sink 0.3%
• CVE-2026-11895 Medium 6.4 HT Mega Addons for Elementor <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'display_options' Setting 0.2%
• CVE-2025-13141 Medium 6.4 HT Mega – Absolute Addons For Elementor <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tag Attribute Injection 0.2%
• CVE-2025-8068 Medium 4.3 HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions 0.4%
• CVE-2025-8401 Medium 4.3 HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure 0.4%
• CVE-2025-8151 Medium 4.3 HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions 0.5%
• CVE-2025-1802 Medium 6.4 HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.3%
• CVE-2025-1261 Medium 6.4 HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget 0.2%
• CVE-2024-12599 Medium 6.4 HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget 0.3%
• CVE-2024-12597 Medium 6.4 HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css 0.3%
• CVE-2024-8910 Medium 4.3 HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id 0.3%
• CVE-2024-5215 Medium 6.4 HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.4%
• CVE-2024-5173 Medium 6.4 HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settings 0.3%
• CVE-2024-4876 Medium 6.4 HT Mega – Absolute Addons For Elementor <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
• CVE-2024-4875 Medium 4.3 HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update 0.8%
• CVE-2024-3990 Medium 6.4 HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip & Popover Widget 0.4%
• CVE-2024-3989 Medium 6.4 HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justify 0.3%
• CVE-2024-3307 Medium 6.4 HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget 0.3%
• CVE-2024-2084 Medium 6.4 HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox Widget 0.3%
• CVE-2023-6214 High 7.5 HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_products 0.6%
• CVE-2024-2790 Medium 6.4 HT Mega – Absolute Addons For Elementor <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQ 0.3%
• CVE-2024-3308 Medium 6.4 HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid Widget 0.4%
• CVE-2024-2085 Medium 6.4 HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' 0.3%
• CVE-2024-1974 High 8.8 HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal 1.2%
• CVE-2024-1421 Medium 6.4 HT Mega – Absolute Addons For Elementor <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel Widget 0.3%
• CVE-2024-1397 Medium 6.4 HT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTag 0.5%