https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-10867.htmlhttps://patchthecve.com/cve/CVE-2024-10867.htmlWed, 17 Jun 2026 06:56:35 +0000MEDIUM 5.4: The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.2 due to insufficient input sanitization and output escaping. This makes it possible fohttps://patchthecve.com/cve/CVE-2024-11600.htmlhttps://patchthecve.com/cve/CVE-2024-11600.htmlWed, 17 Jun 2026 06:58:02 +0000HIGH 7.2: The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.6.0 via the 'write_config' function. This is due to a lack of sanitization on an imported JSON file. This makes it phttps://patchthecve.com/cve/CVE-2024-11583.htmlhttps://patchthecve.com/cve/CVE-2024-11583.htmlWed, 17 Jun 2026 06:58:00 +0000MEDIUM 4.3: The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'remove_zipped_font' function in all versions up to, and including, 1.5.9. This makes it possible for authentichttps://patchthecve.com/cve/CVE-2024-54211.htmlhttps://patchthecve.com/cve/CVE-2024-54211.htmlWed, 17 Jun 2026 08:09:55 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visualmodo Borderless borderless allows Cross-Site Scripting (XSS).This issue affects Borderless: from n/a through <= 1.5.8.