Sensitive Information Exposure in HT Mega Plugin for WordPress by Absolute Addons

CVE-2023-6214

What is CVE-2023-6214?

The HT Mega – Absolute Addons For Elementor plugin for WordPress introduces a vulnerability that exposes sensitive information due to improper access controls in the purchased_products function. This weakness allows unauthenticated attackers to retrieve sensitive data, including order details and personally identifiable information (PII) of customers, from the past seven days. Webmasters and site administrators using this plugin should take immediate action to secure their installations to prevent unauthorized data access.

References