WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in HT Mega Addons for Elementor – Elementor Widgets & Template Builder

Elementor addon offering 146+ widgets, AI Builder, Mega Menu, Ready Templates, Page Builder, Slider, Gallery, Post Grid & more.

33Reported vulnerabilities
9.8Highest CVSS score
3.2.3Latest version
70,000+Active installs

What to do now

Update HT Mega Addons for Elementor – Elementor Widgets & Template Builder to 3.0.7 or later. 33 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 12, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2023-37999 Critical 9.8 3.3% Before 2.2.1 2.2.1 July 7, 2023
CVE-2023-6214 High 7.5 0.6% 0 to 2.4.6 (inclusive) 2.4.7 May 2, 2024
CVE-2024-1974 Medium 6.5 1.2% 0 to 2.4.6 (inclusive)
0 to 2.4.6 (inclusive)		 2.4.7 April 9, 2024
CVE-2024-12599 Medium 6.4 0.3% 0 to 2.8.1 (inclusive) 2.8.2 February 11, 2025
CVE-2024-3989 Medium 6.4 0.3% 2.5.0 and earlier 2.5.1 May 7, 2024
CVE-2024-3308 Medium 6.4 0.4% 2.4.9 and earlier 2.5.0 April 16, 2024
CVE-2024-2790 Medium 6.4 0.3% 2.4.8 and earlier 2.4.9 April 16, 2024
CVE-2024-2084 Medium 6.4 0.3% 2.4.6 and earlier 2.4.7 April 16, 2024
CVE-2024-30182 Medium 6.4 0.4% 2.4.3 and earlier 2.4.4 March 25, 2024
CVE-2025-13141 Medium 6.4 0.2% 3.0.0 and earlier 3.0.1 November 20, 2025
CVE-2023-50901 Medium 6.1 0.4% 2.3.8 and earlier 2.3.9 December 26, 2023
CVE-2026-4106 Medium 5.3 0.7% Before 3.0.7 3.0.7 April 24, 2026
CVE-2025-1802 Medium 5.4 0.3% 0 to 2.8.3 (inclusive) 2.8.4 March 20, 2025
CVE-2024-12597 Medium 5.4 0.3% 0 to 2.7.6 (inclusive) 2.7.7 February 4, 2025
CVE-2024-5215 Medium 5.4 0.4% 0 to 2.5.5 (inclusive) 2.5.6 June 26, 2024
CVE-2024-5173 Medium 5.4 0.3% 0 to 2.5.5 (inclusive) 2.5.6 June 26, 2024
CVE-2024-4876 Medium 5.4 0.4% 0 to 2.5.2 (inclusive) 2.5.3 May 21, 2024
CVE-2024-3990 Medium 5.4 0.4% 0 to 2.5.0 (inclusive) 2.5.1 May 14, 2024
CVE-2024-3307 Medium 5.4 0.3% 0 to 2.4.9 (inclusive) 2.5.0 May 2, 2024
CVE-2024-2085 Medium 5.4 0.3% 0 to 2.4.6 (inclusive) 2.4.7 May 2, 2024
CVE-2024-1421 Medium 5.4 0.3% 0 to 2.4.4 (inclusive) 2.4.5 March 12, 2024
CVE-2024-1397 Medium 5.4 0.5% 0 to 2.4.6 (inclusive) 2.4.7 March 12, 2024
CVE-2021-24261 Medium 5.4 0.7% 1.5.5 and earlier 1.5.7 April 13, 2021
CVE-2025-1261 Medium 5.4 0.2% 0 to 2.8.2 (inclusive) 2.8.3 March 8, 2025
CVE-2024-38706 Medium 4.3 0.7% 2.5.7 and earlier 2.5.8 July 11, 2024
CVE-2024-4875 Medium 4.3 0.8% 0 to 2.5.2 (inclusive) 2.5.3 May 21, 2024
CVE-2024-32782 Medium 4.3 0.9% 2.4.7 and earlier 2.4.8 April 22, 2024
CVE-2025-8401 Medium 4.3 0.3% 0 to 2.9.1 (inclusive) 2.9.2 July 31, 2025
CVE-2025-8151 Medium 4.3 0.4% 0 to 2.9.1 (inclusive) 2.9.2 July 31, 2025
CVE-2025-8068 Medium 4.3 0.3% 0 to 2.9.1 (inclusive) 2.9.2 July 31, 2025
CVE-2025-54695 Medium 4.3 0.3% 2.9.0 and earlier 2.9.1 July 30, 2025
CVE-2024-8910 Medium 4.3 0.3% 0 to 2.6.5 (inclusive) 2.6.6 September 25, 2024
CVE-2023-51529 Medium 4.3 0.2% 2.3.3 and earlier 2.3.4 December 27, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.