Beveiligingsadvies

CVE-2024-8910

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-09-25 06:48:59
Laatst bijgewerkt 2026-04-08 16:34:34
Toegewezen door Wordfence
CVSS-score 4.3
Status PUBLISHED

Beschrijving

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.5 via the render function in includes/widgets/htmega_accordion.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.