HT Mega Addons for Elementor – Elementor Widgets & Template Builder

Vulnerabilities 34Slug ht-mega-for-elementorLatest version 3.0.10WordPress.org →

Minimum safe version

3.0.7

Update to 3.0.7 or later to address 34 fixable vulnerabilities

Latest available3.0.10 ✓
N/A
2026-04-24< 3.0.7

HT Mega Addons for Elementor – Elementor Widgets & Template Builder < 3.0.7 - Unauthenticated Information Exposure

WordfenceCVE
Medium 4.3
2025-07-31< 2.9.2

HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure

EUVDWordfenceCVE
Medium 4.3
2025-07-31< 2.9.2

HT Mega – Absolute Addons For Elementor <= 2.9.1 - Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions

EUVDWordfenceCVE
Medium 4.3
2025-07-31< 2.9.2

HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions

EUVDWordfenceCVE
Medium 6.4
2025-03-20< 2.8.4

HT Mega – Absolute Addons For Elementor <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

EUVDWordfenceCVE
Medium 6.4
2025-03-08< 2.8.3

HT Mega – Absolute Addons For Elementor <= 2.8.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget

EUVDWordfenceCVE
Medium 6.5
2024-05-23< 2.4.7

HT Mega – Absolute Addons For Elementor <= 2.4.5 - Authenticated (Contributor+) Directory Traversal

WordfenceCVEPatchstackWPScan
Medium 4.3
2024-12-27< 2.3.4

WordPress HT Mega Plugin <= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

PatchstackCVEWordfenceWPScan
N/A
2021-12-20< 1.7.0

WordPress HT Mega plugin <= 1.6.9 - SQL injection (SQLi) vulnerability

Patchstack