CVE-2024-4876

🗓️ 21 May 2024 11:09:15Reported by WordfenceType

HT Mega plugin WordPress XSS vulnerability in version 2.5.2

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2024-4876 HT Mega – Absolute Addons For Elementor <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting	21 May 202411:02	–	cvelist
Patchstack	WordPress HT Mega Plugin <= 2.5.2 is vulnerable to Cross Site Scripting (XSS)	21 May 202400:00	–	patchstack
Vulnrichment	CVE-2024-4876 HT Mega – Absolute Addons For Elementor <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting	21 May 202411:02	–	vulnrichment
NVD	CVE-2024-4876	21 May 202411:15	–	nvd
WPVulnDB	HT Mega < 2.5.3 - Contributor+ Stored XSS	21 May 202400:00	–	wpvulndb
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 20, 2024 to May 26, 2024)	30 May 202415:23	–	wordfence

Nvd

Vulners

Node

hasthemes ht_megaRange<2.5.3freewordpress

[
  {
    "vendor": "devitemsllc",
    "product": "HT Mega – Absolute Addons For Elementor",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "2.5.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3088899/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/39e104fa-591a-41e8-af7e-f8b32a199170
plugins	www.plugins.trac.wordpress.org/browser/ht-mega-for-elementor/tags/2.5.0/includes/widgets/htmega_popover.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 May 2024 11:15Current

5.9Medium risk

Vulners AI Score5.9

CVSS35.4 - 6.4

EPSS0.00068

SSVC

CWE-79