https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-47311.htmlhttps://patchthecve.com/cve/CVE-2024-47311.htmlWed, 17 Jun 2026 07:56:51 +0000MEDIUM 5.3: Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wheel of Life: from n/a through <= 1.1.8.https://patchthecve.com/cve/CVE-2024-49693.htmlhttps://patchthecve.com/cve/CVE-2024-49693.htmlWed, 17 Jun 2026 08:00:17 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kraft Plugins Mega Elements mega-elements-addons-for-elementor allows Stored XSS.This issue affects Mega Elements: from n/a through <= 1.2.6.https://patchthecve.com/cve/CVE-2024-37466.htmlhttps://patchthecve.com/cve/CVE-2024-37466.htmlWed, 17 Jun 2026 07:38:25 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kraftplugins Mega Elements.This issue affects Mega Elements: from n/a through 1.2.2.https://patchthecve.com/cve/CVE-2024-3627.htmlhttps://patchthecve.com/cve/CVE-2024-3627.htmlWed, 17 Jun 2026 07:44:39 +0000MEDIUM 5.4: The Wheel of Life: Coaching and Assessment Tool for Life Coach plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on several functions in the AjaxFunctions.php file in all versions up to, and including, 1.1.7. This makes it possible forhttps://patchthecve.com/cve/CVE-2024-32575.htmlhttps://patchthecve.com/cve/CVE-2024-32575.htmlWed, 17 Jun 2026 07:29:52 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kraftplugins Mega Elements allows Stored XSS.This issue affects Mega Elements: from n/a through 1.1.9.