CVE-2024-38706

MEDIUM EXPLOITED

HasThemes HT Mega <2.5.7 - Path Traversal

Title source: llm

Path Traversal: '.../...//' vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through <= 2.5.7.

CVSS v3 6.5

EPSS 0.0123

EPSS Percentile 79.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

VulnCheck KEV 2024-07-11

CWE

CWE-35

Status published

Products (2)

DevItems/HT Mega < 2.5.7

hasthemes/ht_mega < 2.5.8

Published Jul 12, 2024

Tracked Since Feb 18, 2026