https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-6628.htmlhttps://patchthecve.com/cve/CVE-2024-6628.htmlWed, 17 Jun 2026 08:18:22 +0000MEDIUM 4.3: The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.9.9. This is due to missing or incorrect nonce validation when deleting form submissions. This makes it possible for unauthhttps://patchthecve.com/cve/CVE-2024-6626.htmlhttps://patchthecve.com/cve/CVE-2024-6626.htmlWed, 17 Jun 2026 08:18:22 +0000MEDIUM 5.3: The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several functions in all versions up to, and including, 2.9.9.9. This makes it possible for unauthenticated attackers to view fhttps://patchthecve.com/cve/CVE-2024-38748.htmlhttps://patchthecve.com/cve/CVE-2024-38748.htmlWed, 17 Jun 2026 07:40:58 +0000MEDIUM 5.3: Access Control vulnerability in TheInnovs EleForms allows . This issue affects EleForms: from n/a through 2.9.9.9.