VULNERABILITY INTELLIGENCE
CVE-2026-4106
CVSS score5.3 MEDIUM
EPSS probability0.74%
CISA KEVNot currently listed
Published2026-04-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
The HT Mega Addons for Elementor WordPress plugin before 3.0.7 contains an unauthenticated AJAX action returning some PII (such as full name, city, state and country) of customers who placed orders in the last 7 days
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-200