Skip to content
OpenAdvisories

Product · HTMega

HT Mega

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-125807

    WordPress HT Mega plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HTMega HT Mega ht-mega-for-elementor allows Stored XSS.This issue affects HT Mega: from n/a through 3.2.8.

    HTMega HT Mega
  • Medium 5.3
    CVE-2026-125808

    WordPress HT Mega plugin <= 3.2.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in HTMega HT Mega ht-mega-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HT Mega: from n/a through 3.2.8.

    HTMega HT Mega