
CVE-2026-4106
WordPress HTMega Unauthenticated PII Disclosure Exploit (CVE-2026-4106)
educationexploitationinformation-gathering+6
1

WordPress HTMega Unauthenticated PII Disclosure Exploit (CVE-2026-4106)

HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload

HT Mega – Absolute Addons For Elementor <= 2.5.2 - Missing Authorization to Options Update