Directory Traversal Vulnerability in HT Mega's Absolute Addons For Elementor Plugin

CVE-2024-1974

What is CVE-2024-1974?

The HT Mega – Absolute Addons For Elementor plugin for WordPress is affected by a Directory Traversal vulnerability present in all versions up to and including 2.4.6. This flaw exists in the render function, enabling authenticated attackers with contributor access or higher to exploit the vulnerability. Successful exploitation can lead to unauthorized access to sensitive files on the server, potentially exposing critical information. It is essential for users and administrators of the affected versions to apply updates to mitigate this security risk.

References