Approved changes feed: RSS · Atom

cpe:2.3:a:devitems:ht_mega:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDevitems (8fb4f6cc-8673-55d2-9c21-b5c205add89f)
ProductHt Mega (50ccbba8-b57f-5dc9-80d7-acb2918b8af1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-54695 vulnerable 2026-06-08 07:33:13.078601 WordPress HT Mega Plugin plugin <= 2.9.0 - Broken Access Control Vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in DevItems HT Mega ht-mega-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HT Mega: from n/a through <= 2.9.0.
Published: 2025-08-14T10:34:53.074Z
Updated: 2026-04-28T16:13:34.980Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38706 vulnerable 2026-06-08 06:41:47.964286 WordPress HT Mega plugin <= 2.5.7 - JSON Path Traversal vulnerability
MEDIUM (6.5)
Path Traversal: '.../...//' vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through <= 2.5.7.
Published: 2024-07-12T14:08:50.645Z
Updated: 2026-04-28T16:10:05.097Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32782 vulnerable 2026-06-08 06:37:23.976556 WordPress HT Mega plugin <= 2.4.7 - Sensitive Data Exposure vulnerability
MEDIUM (4.3)
Insertion of Sensitive Information Into Sent Data vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through <= 2.4.7.
Published: 2024-04-24T07:52:19.918Z
Updated: 2026-04-28T16:09:40.111Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30182 vulnerable 2026-06-08 06:35:29.147337 WordPress HT Mega – Absolute Addons For Elementor plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through <= 2.4.3.
Published: 2024-03-27T11:46:10.227Z
Updated: 2026-04-28T16:09:21.065Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.