Approved changes feed: RSS · Atom

cpe:2.3:a:hasthemes:ht_mega_-_absolute_addons_for_elementor_page_builder:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorHasthemes (d368bab3-bc4f-5819-9d32-f6fb06c04453)
ProductHt Mega Absolute Addons For Elementor Page Builder (dee3a7c7-b507-5664-96e8-b78d53ec03ef)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/mamun94/ht-mega-for-elementor purl2cpe 2026-06-01 10:17:01.864283

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1974 vulnerable 2026-06-03 14:54:35.111191 HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal
HIGH (8.8)
The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.6 via the render function. This makes it possible for authenticated attackers, with contributor access or higher, to read the contents of arbitrary files on the server, which can contain sensitive information.
Published: 2024-04-09T18:58:34.032Z
Updated: 2026-04-08T16:36:16.389Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.