Lucene search
K

65 matches found

RedhatCVE
RedhatCVE
added yesterday3 views

CVE-2026-4106

The HT Mega Addons for Elementor WordPress plugin before 3.0.7 contains an unauthenticated AJAX action returning some PII such as full name, city, state and country of customers who placed orders in the last 7 days...

5.3CVSS5.5AI score0.0039EPSS
Exploits1References1
NVD
NVD
added 2026/04/23 7:16 a.m.1 views

CVE-2026-4106

The HT Mega Addons for Elementor WordPress plugin before 3.0.7 contains an unauthenticated AJAX action returning some PII such as full name, city, state and country of customers who placed orders in the last 7 days...

5.3CVSS0.0039EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/04/23 6:0 a.m.2 views

CVE-2026-4106

The HT Mega Addons for Elementor WordPress plugin before 3.0.7 contains an unauthenticated AJAX action returning some PII such as full name, city, state and country of customers who placed orders in the last 7 days...

5.8AI score0.0039EPSS
Exploits1References1
CVE
CVE
added 2026/04/23 6:0 a.m.28 views

CVE-2026-4106

The HT Mega Addons for Elementor WordPress plugin is affected by CVE-2026-4106, with versions before 3.0.7 exposing an unauthenticated AJAX action that returns PII (e.g., full name, city, state, country) for customers who placed orders in the last 7 days. Impact is information disclosure of custo...

5.3CVSS5.8AI score0.0039EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/04/23 12:0 a.m.6 views

WordPress plugin HT Mega Addons for Elementor 信息泄露漏洞

WordPress is a blog platform developed using the PHP language by the WordPress Foundation. This platform allows users to create personal blogs on servers based on PHP and MySQL. WordPress Plugins are application plugins developed by the WordPress Foundation. The WordPress plugin HT Mega Addons fo...

5.3CVSS5.8AI score0.0039EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-39498

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.0012EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-51842

Malicious code in bioql PyPI...

7.1CVSS6.6AI score0.0018EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-30317

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.00107EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-12347

Malicious code in bioql PyPI...

5.4CVSS6.6AI score0.00181EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-40159

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00156EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-30743

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00032EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/09/24 6:30 p.m.2 views

CVE-2025-53463

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HT Plugins HT Mega – Absolute Addons for WPBakery Page Builder ht-mega-for-wpbakery allows DOM-Based XSS.This issue affects HT Mega – Absolute Addons for WPBakery Page Builder: from n/a through =...

6.5CVSS5.9AI score0.00032EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/09/22 7:39 p.m.3 views

WordPress HT Mega – Absolute Addons for WPBakery Page Builder Plugin <= 1.0.9 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by theviper17 in WordPress Plugin HT Mega – Absolute Addons for WPBakery Page Builder versions = 1.0.9...

6.5CVSS5.7AI score0.00032EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/09/22 7:15 p.m.0 views

CVE-2025-53463

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HT Plugins HT Mega – Absolute Addons for WPBakery Page Builder ht-mega-for-wpbakery allows DOM-Based XSS.This issue affects HT Mega – Absolute Addons for WPBakery Page Builder: from n/a through =...

6.5CVSS0.00032EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.2 views

PT-2025-38999

Name of the Vulnerable Software and Affected Versions HT Mega – Absolute Addons for WPBakery Page Builder versions through 1.0.9 Description The software contains a flaw related to improper input handling during web page generation, which can lead to Cross-site Scripting XSS. This specific instan...

6.5CVSS5.7AI score0.00032EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.1 views

WordPress plugin HT Mega – Absolute Addons for WPBakery Page Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scriptin...

6.5CVSS5.9AI score0.00032EPSS
Exploits0References1
CVE
CVE
added 2025/07/31 11:19 a.m.15 views

CVE-2025-8068

The CVE-2025-8068 issue affects the WordPress plugin HT Mega – Absolute Addons For Elementor. A vulnerability in the ajax_trash_templates function arises from an improper capability check, making authenticated users with Contributor-level access and above able to delete arbitrary attachment files...

4.3CVSS6.3AI score0.00159EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/27 1:21 p.m.3 views

CVE-2025-53206 WordPress HT Mega – Absolute Addons for WPBakery Page Builder plugin <= 1.0.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HT Plugins HT Mega – Absolute Addons for WPBakery Page Builder ht-mega-for-wpbakery allows Stored XSS.This issue affects HT Mega – Absolute Addons for WPBakery Page Builder: from n/a through = 1.0....

6.5CVSS5.2AI score0.00143EPSS
Exploits0References1
CVE
CVE
added 2025/06/27 1:21 p.m.11 views

CVE-2025-53206

CVE-2025-53206 corresponds to a stored XSS vulnerability in the WordPress plugin HT Mega – Absolute Addons for WPBakery Page Builder . Affected: versions ≤ 1.0.8. Root cause: improper input neutralization during web page generation. Impact per reported CVSS: Network attack, Privileges Required Lo...

6.5CVSS5.9AI score0.00143EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.0 views

WordPress plugin HT Mega – Absolute Addons for WPBakery Page Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS5.7AI score0.00143EPSS
Exploits0References2
Rows per page
Query Builder