CVE-2024-8910

CVSS V2 None CVSS V3 None

Description

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.5 via the render function in includes/widgets/htmega_accordion.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.

Overview

CVE ID
CVE-2024-8910

Assigner
Wordfence

Vulnerability Status
PUBLISHED

Published Version
2024-09-25T06:48:59.659Z

Last Modified Date
2024-09-25T13:26:21.429Z

Weakness Enumerations

CWE	URL
CWE-1230	http://cwe.mitre.org/data/definitions/1230.html

References

Reference URL	Reference Tags
https://www.wordfence.com/threat-intel/vulnerabilities/id/09fb88e4-4846-40d3-8a79-a6a867bfb59f?source=cve
https://plugins.trac.wordpress.org/changeset/3156058/ht-mega-for-elementor

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-8910
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8910

History

Created	Old Value	New Value	Data Type	Notes
2024-10-06 12:05:32				Added to TrackCVE