cve-2026-4106

{
  "cvss": 0.0,
  "datePublished": "2026-10-13T00:00:00Z",
  "dateUpdated": "2026-10-13T00:00:00Z",
  "description": "The HT Mega Addons for Elementor  WordPress plugin before 3.0.7 contains an unauthenticated AJAX action returning some PII (such as full name, city, state and country) of customers who placed orders in the last 7 days",
  "dueDate": "",
  "id": "CVE-2026-4106",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "product": "HT Mega Addons for Elementor",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "HIGH",
  "source": "vulncheck_kev",
  "title": "  Exposure of Sensitive Information to an Unauthorized Actor",
  "vendor": "HasThemes"
}