CVE-2026-108387

The radare2 reverse engineering framework (prior to version 6.2.2 ) is vulnerable to Remote Code Execution (RCE) . The flaw exists because attacker-controlled data from specific binary format plugins can reach RBinInfo->bclass. By opening or analyzing a crafted Pebble or Sega Mega Drive binary...

Mega-Bot

Mega Bot ☣ Scanner & Auto Exploiter What's Mega Bot ? from MegaBot import print """ Tool Scanner Tool Auto Exploiter """ About Mega Bot from MegaBot import print """ +----------------------------------+----------------------------------+ 1 X4PriV8 V1 | 22 XAttacker 2.5 official 2 AUto FixerFor...

HT Mega < 3.0.7 - Sensitive Information Disclosure

The HT Mega plugin for WordPress is vulnerable to Sensitive Information Exposure via AJAX actions. This template dynamically extracts the security nonce before exploitation. id: CVE-2026-4106 info: name: HT Mega 3.0.7 - Sensitive Information Disclosure author: EFETR severity: high description: |...

HT Mega – Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation

The HT Mega plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.2.0. This is due to missing validation of the regrole parameter on the htmegaajaxregister function. This makes it possible for unauthenticated attackers to create administrator accounts. id...

CVE-2026-105602

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

CVE-2026-105602 Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

EUVD-2026-115176

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

CVE-2026-105602

The Helix Ultimate Joomla extension by joomshaper.com is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 2.2.11 . The vulnerability exists within the Mega Menu Badge Text component, where improper neutralization of input allows for malicious script execution. This issue is as...

CVE-2026-105602 Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

PT-2026-135424

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

CVE-2026-105602: joomshaper.com Helix Ultimate extension for Joomla: Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate <…

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

CVE-2026-4106

CVE-2026-4106: WordPress HT Mega Unauthenticated PII Disclosure Exploit A robust, multi-threaded Proof of Concept PoC exploit for CVE-2026-4106 , targeting the HT Mega - Absolute Addons for Elementor plugin for WordPress versions 3.0.7. Vulnerability Overview The HT Mega plugin registers several...

CVE-2024-4875

CVE-2024-4875 HT Mega – Absolute Addons For Elementor = 2.5.2 - Missing Authorization to Options Update Description: The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification of data|loss of data due to a missing capability check on the...

CVE-2026-111318

The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'href attribute of inside .htmega-tab-nav' parameter in all versions up to, and including, 3.2.7 due to insufficient input sanitization and...

CVE-2026-111318 HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sink

The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'href attribute of inside .htmega-tab-nav' parameter in all versions up to, and including, 3.2.7 due to insufficient input sanitization and...

CVE-2026-111318

The HT Mega Addons for Elementor WordPress plugin (versions &lt;= 3.2.7 ) is vulnerable to Stored DOM-Based Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping in the href attribute of tags within the .htmega-tab-nav parameter of the Tabs widget . U...

EUVD-2026-112693

The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'href attribute of inside .htmega-tab-nav' parameter in all versions up to, and including, 3.2.7 due to insufficient input sanitization and...

CVE-2026-111318 HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sink

The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'href attribute of inside .htmega-tab-nav' parameter in all versions up to, and including, 3.2.7 due to insufficient input sanitization and...

WordPress HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability

Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability discovered by UKO in WordPress Plugin HT Mega versions = 3.2.7...

WordPress HT Mega Addons for Elementor cross-site scripting vulnerability

WordPress HT Mega Addons for Elementor versions 3.2.7 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and output escaping. Attackers can exploit this by injecting arbitrary web scripts via the href attribute of elements within...