https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T19:20:02.519150+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-11895 CVE-2026-11895 — HT Mega Addons for Elementor <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data Table 'displa… 2026-09-30T19:20:02.520638+00:00

Affected: devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder

The HT Mega Addons for Elementor – Elementor Widgets & Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Data Table 'display_options' Setting in all versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.