HTMega vulnerabilities and threats

2 threats

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.5	CVE-2026-125807HT Mega (WordPress plugin) · Cross-site Scripting Medium6.52026-11-13CVE Database V5CVE-2026-125807 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HTMega HT Mega ht-mega-for-elementor allows Stored XSS.This issue affects HT Mega: from n/a through 3.2.8. Vulnerability HTMega	CVE Database V5	2026-11-13
Medium	5.3	CVE-2026-125808HT Mega (WordPress plugin) · Missing Authorization Medium5.32026-11-13CVE Database V5CVE-2026-125808 Missing Authorization vulnerability in HTMega HT Mega ht-mega-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HT Mega: from n/a through 3.2.8. Vulnerability HTMega	CVE Database V5	2026-11-13

Page 1 of 1