WordPress plugin
HT Mega Addons for Elementor – Elementor Widgets & Template Builder security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 36 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High2
- Medium33
- Low0
All HT Mega Addons for Elementor – Elementor Widgets & Template Builder vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Contributor+) Directory Traversal ≤2.4.6Update to 2.4.7 | CVE-2024-1974 | |
| High7.5 | Sensitive Information Exposure via purchased_products ≤2.4.6Update to 2.4.7 | CVE-2023-6214 | |
| Critical9.8 | Missing Authorization to Privilege Escalation <2.2.1Update to 2.2.1 | CVE-2023-37999 |
- High8.8Authenticated (Contributor+) Directory Traversal
≤2.4.6Update to 2.4.7
- High7.5Sensitive Information Exposure via purchased_products
≤2.4.6Update to 2.4.7
- Critical9.8Missing Authorization to Privilege Escalation
<2.2.1Update to 2.2.1
HT Mega Addons for Elementor – Elementor Widgets & Template Builder: common questions
Does HT Mega Addons for Elementor – Elementor Widgets & Template Builder have known vulnerabilities?
Yes. VulnCrest Radar lists 36 known vulnerabilities in HT Mega Addons for Elementor – Elementor Widgets & Template Builder: 1 critical, 2 high, 33 medium. None are known to affect version null.
How do I check which version of HT Mega Addons for Elementor – Elementor Widgets & Template Builder I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent HT Mega Addons for Elementor – Elementor Widgets & Template Builder vulnerability?
CVE-2026-111318, published Oct 28, 2026: HT Mega Addons for Elementor <= 3.2.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Tabs Widget href DOM Sink. Severity: Medium (CVSS 5.4).
Is any HT Mega Addons for Elementor – Elementor Widgets & Template Builder vulnerability listed in CISA KEV?
No. None of the known HT Mega Addons for Elementor – Elementor Widgets & Template Builder vulnerabilities is currently listed in the CISA KEV catalog.