https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-10696.htmlhttps://patchthecve.com/cve/CVE-2024-10696.htmlWed, 17 Jun 2026 06:56:12 +0000MEDIUM 4.3: The UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.8 via the show_template due to missing validatiohttps://patchthecve.com/cve/CVE-2024-4866.htmlhttps://patchthecve.com/cve/CVE-2024-4866.htmlWed, 17 Jun 2026 08:03:04 +0000MEDIUM 6.4: The UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.1.6 due to insufficient input sanihttps://patchthecve.com/cve/CVE-2024-37554.htmlhttps://patchthecve.com/cve/CVE-2024-37554.htmlWed, 17 Jun 2026 07:38:36 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saiful Islam UltraAddons Elementor Lite ultraaddons-elementor-lite allows DOM-Based XSS.This issue affects UltraAddons Elementor Lite: from n/a through <= 2.0.2.