https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-54212.htmlhttps://patchthecve.com/cve/CVE-2024-54212.htmlWed, 17 Jun 2026 08:09:55 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Magical Addons For Elementor magical-addons-for-elementor allows Stored XSS.This issue affects Magical Addons For Elementor: from n/a through <= 1.3.6.https://patchthecve.com/cve/CVE-2024-10352.htmlhttps://patchthecve.com/cve/CVE-2024-10352.htmlWed, 17 Jun 2026 06:55:27 +0000MEDIUM 4.3: The Magical Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.4 via the get_content_type function in includes/widgets/content-reveal.php. This makes it possible for authenticated attackers, with Contributor-level acceshttps://patchthecve.com/cve/CVE-2024-51665.htmlhttps://patchthecve.com/cve/CVE-2024-51665.htmlWed, 17 Jun 2026 08:06:06 +0000MEDIUM 4.9: Server-Side Request Forgery (SSRF) vulnerability in Noor Alam Magical Addons For Elementor magical-addons-for-elementor allows Server Side Request Forgery.This issue affects Magical Addons For Elementor: from n/a through <= 1.2.1.https://patchthecve.com/cve/CVE-2024-38730.htmlhttps://patchthecve.com/cve/CVE-2024-38730.htmlWed, 17 Jun 2026 07:40:56 +0000MEDIUM 4.9: Server-Side Request Forgery (SSRF) vulnerability in Noor alam Magical Addons For Elementor.This issue affects Magical Addons For Elementor: from n/a through 1.1.41.https://patchthecve.com/cve/CVE-2024-38681.htmlhttps://patchthecve.com/cve/CVE-2024-38681.htmlWed, 17 Jun 2026 07:40:51 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Noor alam Magical Addons For Elementor allows Stored XSS.This issue affects Magical Addons For Elementor: from n/a through 1.1.41.https://patchthecve.com/cve/CVE-2024-5161.htmlhttps://patchthecve.com/cve/CVE-2024-5161.htmlWed, 17 Jun 2026 08:15:19 +0000MEDIUM 6.4: The Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter in all versions up to, and including, 1.1.39 due to insufficient input sanitization and output eschttps://patchthecve.com/cve/CVE-2024-2923.htmlhttps://patchthecve.com/cve/CVE-2024-2923.htmlWed, 17 Jun 2026 07:25:50 +0000MEDIUM 6.4: The Magical Addons For Elementor ( Header Footer Builder, Free Elementor Widgets, Elementor Templates Library ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's text effect widget in all versions up to, and including, 1.1.37 due to insufficient input sanitization anhttps://patchthecve.com/cve/CVE-2024-34547.htmlhttps://patchthecve.com/cve/CVE-2024-34547.htmlWed, 17 Jun 2026 07:33:36 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor alam Magical Addons For Elementor allows Stored XSS.This issue affects Magical Addons For Elementor: from n/a through 1.1.34.