CVE-2023-6214

HT Mega – Absolute Addons For Elementor <= 2.4.6 - Sensitive Information Exposure via purchased_products

2024-04-16 00:00
Francesco Carlucci

Strategic Overview

Status
Patched in 2.4.7
Affected Plugin
HT Mega Addons for Elementor – Elementor Widgets & Template Builder
Affected Version
<= 2.4.6
CVSS
7.5High
Weakness type
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
CVE
CVE-2023-6214
View all HT Mega Addons for Elementor – Elementor Widgets & Template Builder vulnerabilities

At a glance

CVE-2023-6214 is a high-severity Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the HT Mega Addons for Elementor WordPress plugin, affecting versions <= 2.4.6. It carries a CVSS score of 7.5 (reachable over the network; low attack complexity; high confidentiality impact). Exploitation requires no authentication. The issue is fixed in version 2.4.7; sites on affected versions should update now. Disclosed April 2024, reported by Francesco Carlucci.

Vulnerability Overview

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.6 via the purchased_products function. This makes it possible for unauthenticatied attackers to extract sensitive data including the previous 7 days of order data including products and customer PII.

Technical Analysis

The vector marks this flaw as remotely reachable over the network, with low attack complexity — no special timing or configuration is needed, and no privileges on the target site, and no interaction from a victim user. A successful exploit has high impact on confidentiality.

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Reaching this weakness in HT Mega Addons for Elementor <= 2.4.6 takes a caller who can reach the endpoint. Sensitive information exposure means data the application intended to keep internal is returned to a caller who should not be able to see it.

The disclosed data — credentials, tokens, customer records or internal paths — is usually worth more as material for a follow-up attack than as an end in itself. For HT Mega Addons for Elementor the fix is 2.4.7: builds <= 2.4.6 are affected, anything from 2.4.7 onward is not.

Remediation

Update to version 2.4.7, or a newer patched version

How does WordSec protect against this?

The fix is the thing that ends this: HT Mega Addons for Elementor 2.4.7 closes this, and updating the plugin is the step that ends it.

  • Alerts

External References

https://www.cve.org/CVERecord?id=CVE-2023-6214https://www.wordfence.com/threat-intel/vulnerabilities/id/54043c6a-48a1-48e8-ba61-a7e8a1773036https://nvd.nist.gov/vuln/detail/CVE-2023-6214

Related records

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C