HasThemes Vulnerabilities and Affected Products
Vulnerabilities associated with HT Mega.
Products
Clear product- ShopLentor4 vulnerabilities
- HT Easy GA4 ( Google Analytics 4 )2 vulnerabilities
- HT Feed2 vulnerabilities
- HT Mega2 vulnerabilities
- HT Mega – Absolute Addons For Elementor2 vulnerabilities
- ht_mega_-_absolute_addons_for_elementor_page_builder2 vulnerabilities
- WC Builder2 vulnerabilities
- download_contact_form_7_widget_for_elementor_page_builder_\&_gutenberg_blocks1 vulnerability
- Extensions For CF71 vulnerability
- Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)1 vulnerability
- Free WooCommerce Theme 99fy Extension1 vulnerability
- HashBar – WordPress Notification Bar1 vulnerability
- HT Builder – WordPress Theme Builder for Elementor1 vulnerability
- HT Menu1 vulnerability
- ht_easy_ga4_\(google_analytics_4\)1 vulnerability
- ht_feed1 vulnerability
- JustTables1 vulnerability
- Really Simple Google Tag Manager1 vulnerability
- Swatchly1 vulnerability
- Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches)1 vulnerability
- WC Builder – WooCommerce Page Builder for WPBakery1 vulnerability
- woolentor-addons1 vulnerability
- WP Plugin Manager1 vulnerability
- WP Templata1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-38706MEDIUM | WordPress HT Mega plugin <= 2.5.7 - JSON Path Traversal vulnerabilityPath Traversal: '.../...//' vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through <= 2.5.7. | CVSS6.5v3.1 | EPSS0.704% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-37999CRITICAL | WordPress HT Mega Absolute Addons for Elementor plugin <= 2.2.0 - Unauthenticated Privilege Escalation vulnerabilityImproper Privilege Management vulnerability in HasThemes HT Mega allows Privilege Escalation.This issue affects HT Mega: from n/a through 2.2.0. | CVSS9.8v3.1 | EPSS3.35% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |