https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-0433.htmlhttps://patchthecve.com/cve/CVE-2025-0433.htmlWed, 17 Jun 2026 08:26:28 +0000MEDIUM 6.4: The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 2.0.7.1 due to insufficient input sanitization and output escapihttps://patchthecve.com/cve/CVE-2024-9618.htmlhttps://patchthecve.com/cve/CVE-2024-9618.htmlWed, 17 Jun 2026 08:24:55 +0000MEDIUM 6.4: The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 2.0.7.2 due to insufficient input sanitization and output escapinghttps://patchthecve.com/cve/CVE-2024-9502.htmlhttps://patchthecve.com/cve/CVE-2024-9502.htmlWed, 17 Jun 2026 08:24:41 +0000MEDIUM 6.4: The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Tooltip module in all versions up to, and including, 2.0.6.7 due to insufficient input sanitization and outphttps://patchthecve.com/cve/CVE-2024-6282.htmlhttps://patchthecve.com/cve/CVE-2024-6282.htmlWed, 17 Jun 2026 08:17:42 +0000MEDIUM 5.4: The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-jltma-wrapper-link element in all versions up to, and including 2.0.6.4 due to insufficient input sanitization and output escaphttps://patchthecve.com/cve/CVE-2024-38710.htmlhttps://patchthecve.com/cve/CVE-2024-38710.htmlWed, 17 Jun 2026 07:40:54 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through 2.0.6.2.https://patchthecve.com/cve/CVE-2024-35660.htmlhttps://patchthecve.com/cve/CVE-2024-35660.htmlWed, 17 Jun 2026 07:35:08 +0000MEDIUM 6.5: Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1.https://patchthecve.com/cve/CVE-2024-35702.htmlhttps://patchthecve.com/cve/CVE-2024-35702.htmlWed, 17 Jun 2026 07:35:13 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through 2.0.6.0.https://patchthecve.com/cve/CVE-2024-35688.htmlhttps://patchthecve.com/cve/CVE-2024-35688.htmlWed, 17 Jun 2026 07:35:11 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through 2.0.5.9.https://patchthecve.com/cve/CVE-2024-5542.htmlhttps://patchthecve.com/cve/CVE-2024-5542.htmlWed, 17 Jun 2026 08:16:09 +0000HIGH 7.2: The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Navigation Menu widget of the plugin's Mega Menu extension in all versions up to, and including, 2.0.6.1 due to insufficient input shttps://patchthecve.com/cve/CVE-2024-5382.htmlhttps://patchthecve.com/cve/CVE-2024-5382.htmlWed, 17 Jun 2026 08:15:50 +0000MEDIUM 6.5: The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ma-template' REST API route in all versions up to, and including, 2.0.6.1. This makes it poshttps://patchthecve.com/cve/CVE-2024-3134.htmlhttps://patchthecve.com/cve/CVE-2024-3134.htmlWed, 17 Jun 2026 07:43:22 +0000MEDIUM 6.4: The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the title_html_tag attribute in all versions up to, and including, 2.0.6.0 due to insufficient input sanitization and output escaping. Thttps://patchthecve.com/cve/CVE-2024-4580.htmlhttps://patchthecve.com/cve/CVE-2024-4580.htmlWed, 17 Jun 2026 08:02:11 +0000MEDIUM 6.4: The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 2.0.6.0 due to insufficient input sanitization and output escaping. This makes it phttps://patchthecve.com/cve/CVE-2024-4265.htmlhttps://patchthecve.com/cve/CVE-2024-4265.htmlWed, 17 Jun 2026 08:01:33 +0000MEDIUM 6.4: The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in versions up to, and including, 2.0.5.9 due to insufficient input sanitization and output escaping. This makes it https://patchthecve.com/cve/CVE-2024-33595.htmlhttps://patchthecve.com/cve/CVE-2024-33595.htmlWed, 17 Jun 2026 07:32:03 +0000MEDIUM 4.3: Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1.