Privilege Escalation Vulnerability in HasThemes HT Mega
CVE-2023-37999

9.8CRITICAL

Key Information:

Vendor

WordPress
Status
Ht Mega
Vendor
CVE Published:
17 May 2024

What is CVE-2023-37999?

A vulnerability in the HasThemes HT Mega plugin permits unauthorized privilege escalation due to improper privilege management. This issue can potentially allow attackers to elevate their privileges within the WordPress environment, thereby exposing sensitive data or enabling further malicious actions. Affected versions include all releases up to 2.2.0. Users are encouraged to upgrade to the latest version to mitigate risks associated with this vulnerability.

Affected Version(s)

HT Mega <= 2.2.0

References

https://patchstack.com/database/vulnerability/ht-mega-for...
vdb-entry

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rafie Muhammad (Patchstack)
.