Advisories · Technology
devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder.
Every CVE that names devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sink
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
HT Mega Addons for Elementor <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'display_options' Setting
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
HT Mega – Absolute Addons For Elementor <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tag Attribute Injection
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Broken access control
- CVSS 4.3 Medium
HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Broken access control
- CVSS 4.3 Medium
HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Path traversal
- CVSS 6.4 Medium
HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_id
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- CWE-1230
- CVSS 6.4 Medium
HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settings
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
HT Mega – Absolute Addons For Elementor <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Broken access control
- CVSS 6.4 Medium
HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip & Popover Widget
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justify
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox Widget
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 7.5 High
HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_products
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Information disclosure
- CVSS 6.4 Medium
HT Mega – Absolute Addons For Elementor <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQ
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid Widget
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size'
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 8.8 High
HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Path traversal
- CVSS 6.4 Medium
HT Mega – Absolute Addons For Elementor <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel Widget
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
HT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTag
- devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder
- Cross-site scripting (XSS)