High
CVE-2023-6214
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 35
Reset filters
Medium
CVE-2024-2790
HT Mega – Absolute Addons For Elementor <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQ
Medium
CVE-2024-3308
HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Grid Widget
Medium
CVE-2024-2085
HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size'
Medium
CVE-2024-30182
HT Mega <= 2.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1421
HT Mega – Absolute Addons For Elementor <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel Widget
Medium
CVE-2024-1397
HT Mega <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via titleTag
Medium
CVE-2023-51529
HT Mega <= 2.3.3 - Cross-Site Request Forgery via Several Functions
Medium
CVE-2023-50901
HT Mega – Absolute Addons For Elementor <= 2.3.8 - Reflected Cross-Site Scripting
Critical
CVE-2023-37999
HT Mega – Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation
Medium
CVE-2021-24261
HT Mega - Absolute Addons for Elementor Page Builder <= 1.5.5 - Contributor+ Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.