agentprime: devitemsllc-ht-mega-addons-for-elementor-elementor-widgets-template-builderEvery new CVE for devitemsllc-ht-mega-addons-for-elementor-elementor-widgets-template-builder.https://agentprime.io/CVE-2026-111318: HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sinkhttps://agentprime.io/advisories/CVE-2026-111318/https://agentprime.io/advisories/CVE-2026-111318/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 09:25:37 GMTCVECVE-2026-11895: HT Mega Addons for Elementor <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'display_options' Settinghttps://agentprime.io/advisories/CVE-2026-11895/https://agentprime.io/advisories/CVE-2026-11895/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 07:41:05 GMTCVECVE-2025-13141: HT Mega – Absolute Addons For Elementor <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tag Attribute Injectionhttps://agentprime.io/advisories/CVE-2025-13141/https://agentprime.io/advisories/CVE-2025-13141/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 08:28:13 GMTCVECVE-2025-8068: HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actionshttps://agentprime.io/advisories/CVE-2025-8068/https://agentprime.io/advisories/CVE-2025-8068/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Jul 2025 11:19:13 GMTCVECVE-2025-8401: HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposurehttps://agentprime.io/advisories/CVE-2025-8401/https://agentprime.io/advisories/CVE-2025-8401/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Jul 2025 11:19:12 GMTCVECVE-2025-8151: HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actionshttps://agentprime.io/advisories/CVE-2025-8151/https://agentprime.io/advisories/CVE-2025-8151/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Jul 2025 11:19:12 GMTCVECVE-2025-1802: HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgetshttps://agentprime.io/advisories/CVE-2025-1802/https://agentprime.io/advisories/CVE-2025-1802/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 11:11:27 GMTCVECVE-2025-1261: HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widgethttps://agentprime.io/advisories/CVE-2025-1261/https://agentprime.io/advisories/CVE-2025-1261/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 08 Mar 2025 01:44:27 GMTCVECVE-2024-12599: HT Mega – Absolute Addons For Elementor <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widgethttps://agentprime.io/advisories/CVE-2024-12599/https://agentprime.io/advisories/CVE-2024-12599/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 04:21:22 GMTCVECVE-2024-12597: HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_csshttps://agentprime.io/advisories/CVE-2024-12597/https://agentprime.io/advisories/CVE-2024-12597/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Feb 2025 06:41:53 GMTCVECVE-2024-8910: HT Mega – Absolute Addons For Elementor <= 2.6.5 - Authenticated (Contributor+) Sensitive Information Exposure via template_idhttps://agentprime.io/advisories/CVE-2024-8910/https://agentprime.io/advisories/CVE-2024-8910/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Sep 2024 06:48:59 GMTCVECVE-2024-5215: HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgetshttps://agentprime.io/advisories/CVE-2024-5215/https://agentprime.io/advisories/CVE-2024-5215/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Jun 2024 06:56:03 GMTCVECVE-2024-5173: HT Mega – Absolute Addons For Elementor <= 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Player Widget Settingshttps://agentprime.io/advisories/CVE-2024-5173/https://agentprime.io/advisories/CVE-2024-5173/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Jun 2024 02:07:56 GMTCVECVE-2024-4876: HT Mega – Absolute Addons For Elementor <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-4876/https://agentprime.io/advisories/CVE-2024-4876/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 May 2024 11:02:28 GMTCVECVE-2024-4875: HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Updatehttps://agentprime.io/advisories/CVE-2024-4875/https://agentprime.io/advisories/CVE-2024-4875/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 May 2024 08:31:03 GMTCVECVE-2024-3990: HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip & Popover Widgethttps://agentprime.io/advisories/CVE-2024-3990/https://agentprime.io/advisories/CVE-2024-3990/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 May 2024 20:03:35 GMTCVECVE-2024-3989: HT Mega – Absolute Addons For Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Justifyhttps://agentprime.io/advisories/CVE-2024-3989/https://agentprime.io/advisories/CVE-2024-3989/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 May 2024 20:03:17 GMTCVECVE-2024-3307: HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widgethttps://agentprime.io/advisories/CVE-2024-3307/https://agentprime.io/advisories/CVE-2024-3307/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 16:52:37 GMTCVECVE-2024-2084: HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox Widgethttps://agentprime.io/advisories/CVE-2024-2084/https://agentprime.io/advisories/CVE-2024-2084/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 16:52:23 GMTCVECVE-2023-6214: HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_productshttps://agentprime.io/advisories/CVE-2023-6214/https://agentprime.io/advisories/CVE-2023-6214/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 16:52:07 GMTCVECVE-2024-2790: HT Mega – Absolute Addons For Elementor <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQhttps://agentprime.io/advisories/CVE-2024-2790/https://agentprime.io/advisories/CVE-2024-2790/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 16:52:06 GMTCVECVE-2024-3308: HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid Widgethttps://agentprime.io/advisories/CVE-2024-3308/https://agentprime.io/advisories/CVE-2024-3308/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 16:51:57 GMTCVECVE-2024-2085: HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size'https://agentprime.io/advisories/CVE-2024-2085/https://agentprime.io/advisories/CVE-2024-2085/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 16:51:45 GMTCVECVE-2024-1974: HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversalhttps://agentprime.io/advisories/CVE-2024-1974/https://agentprime.io/advisories/CVE-2024-1974/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 18:58:34 GMTCVECVE-2024-1421: HT Mega – Absolute Addons For Elementor <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel Widgethttps://agentprime.io/advisories/CVE-2024-1421/https://agentprime.io/advisories/CVE-2024-1421/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 22:32:26 GMTCVECVE-2024-1397: HT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTaghttps://agentprime.io/advisories/CVE-2024-1397/https://agentprime.io/advisories/CVE-2024-1397/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 22:32:26 GMTCVE