CVE-2023-37999: WordPress HT Mega Absolute Addons for Elementor plugin <= 2.2.0 - Unauthenticated Privilege Escalation vulnerability
Published May 17, 2024
·Updated
Improper Privilege Management vulnerability in HasThemes HT Mega allows Privilege Escalation.This issue affects HT Mega: from n/a through 2.2.0.
Affected Software
3 affected components
HasThemes HT Mega<=2.2.0
WordPress HT Mega Absolute Addons for Elementor<=2.2.0
HasThemes Ht Mega Wordpress<2.2.1
Remediation
Information
Update to 2.2.1 or a higher version.
Event History
May 17, 2024
CVE Published
via MITRE·06:51 AM
Data Sourced
via MITRE·06:51 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-37999?
CVE-2023-37999 is classified as a high severity vulnerability due to its ability to allow privilege escalation.
2
How do I fix CVE-2023-37999?
To fix CVE-2023-37999, update HasThemes HT Mega to version 2.2.1 or later.
3
What versions of HasThemes HT Mega are affected by CVE-2023-37999?
CVE-2023-37999 affects HasThemes HT Mega versions up to and including 2.2.0.
4
Can CVE-2023-37999 affect sites using WordPress?
Yes, CVE-2023-37999 affects the HT Mega Absolute Addons for Elementor plugin in WordPress when using versions up to 2.2.0.
5
What type of vulnerability is CVE-2023-37999?
CVE-2023-37999 is an improper privilege management vulnerability that allows for privilege escalation.