PatchTheCVE: the pack elementor addonshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-6550: The The Pack Elementor addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘sliderhttps://patchthecve.com/cve/CVE-2025-6550.htmlhttps://patchthecve.com/cve/CVE-2025-6550.htmlWed, 17 Jun 2026 10:02:07 +0000MEDIUM 6.4: The The Pack Elementor addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slider_options’ parameter in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with ContributCVE-2024-50453: Relative Path Traversal vulnerability in webangon The Pack Elementor addons the-pack-addon allows PHP Local Fihttps://patchthecve.com/cve/CVE-2024-50453.htmlhttps://patchthecve.com/cve/CVE-2024-50453.htmlWed, 17 Jun 2026 08:04:30 +0000HIGH 7.5: Relative Path Traversal vulnerability in webangon The Pack Elementor addons the-pack-addon allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through <= 2.0.9.CVE-2024-47383: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webangonhttps://patchthecve.com/cve/CVE-2024-47383.htmlhttps://patchthecve.com/cve/CVE-2024-47383.htmlWed, 17 Jun 2026 07:57:00 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webangon The Pack Elementor addons the-pack-addon allows Stored XSS.This issue affects The Pack Elementor addons: from n/a through <= 2.0.8.8.CVE-2024-38768: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Webangon The Phttps://patchthecve.com/cve/CVE-2024-38768.htmlhttps://patchthecve.com/cve/CVE-2024-38768.htmlWed, 17 Jun 2026 07:41:01 +0000MEDIUM 4.3: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Webangon The Pack Elementor addons allows PHP Local File Inclusion, Path Traversal.This issue affects The Pack Elementor addons: from n/a through 2.0.8.6.CVE-2024-32785: Cross-Site Request Forgery (CSRF) vulnerability in Webangon The Pack Elementor addons allows Cross-Site Scripthttps://patchthecve.com/cve/CVE-2024-32785.htmlhttps://patchthecve.com/cve/CVE-2024-32785.htmlWed, 17 Jun 2026 07:30:25 +0000HIGH 7.1: Cross-Site Request Forgery (CSRF) vulnerability in Webangon The Pack Elementor addons allows Cross-Site Scripting (XSS).This issue affects The Pack Elementor addons: from n/a through 2.0.8.3.CVE-2024-32718: Server-Side Request Forgery (SSRF) vulnerability in Webangon The Pack Elementor.This issue affects The Pack Elhttps://patchthecve.com/cve/CVE-2024-32718.htmlhttps://patchthecve.com/cve/CVE-2024-32718.htmlWed, 17 Jun 2026 07:30:18 +0000MEDIUM 4.9: Server-Side Request Forgery (SSRF) vulnerability in Webangon The Pack Elementor.This issue affects The Pack Elementor addons: from n/a through 2.0.8.2.