CVE-2026-4106 — HT Mega < 3.0.7 – Unauthenticated PII Disclosure
The HT Mega Addons for Elementor WordPress plugin before 3.0.7 contains an unauthenticated AJAX action returning some PII (such as full name, city, state and country) of custom…
Published: 2026-04-23 · CVSS: 5.3 · CVSS 3.1
The HT Mega Addons for Elementor WordPress plugin before 3.0.7 contains an unauthenticated AJAX action returning some PII (such as full name, city, state and country) of customers who placed orders in the last 7 days
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7