PatchTheCVEht mega vulnerabilities and fixes
Recent CVEs affecting ht mega, with upgrade or downgrade steps. 7 tracked.
Also searched as: htmega.
ht mega has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2025-07-31. Highest priority: CVE-2024-12599 (score 29/100).
- CVE-2025-8401 MEDIUM 4.3 UPGRADE The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposu
- CVE-2025-8151 MEDIUM 4.3 UPGRADE The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Path Traversal in all versio
- CVE-2025-8068 MEDIUM 4.3 UPGRADE The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification an
- CVE-2025-1802 MEDIUM 6.4 UPGRADE The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting
- CVE-2025-1261 MEDIUM 6.4 UPGRADE The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site
- CVE-2024-8910 MEDIUM 4.3 UPGRADE The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposu
- CVE-2024-12599 MEDIUM 6.4 UPGRADE The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting
FAQ
How do I fix ht mega vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ht mega being exploited right now?
None of the tracked ht mega CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ht mega CVE should I patch first?
CVE-2024-12599 currently ranks highest (29/100): The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting .