https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-49233.htmlhttps://patchthecve.com/cve/CVE-2024-49233.htmlWed, 17 Jun 2026 07:59:33 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MadrasThemes MAS Elementor mas-addons-for-elementor allows DOM-Based XSS.This issue affects MAS Elementor: from n/a through <= 1.1.6.https://patchthecve.com/cve/CVE-2024-9206.htmlhttps://patchthecve.com/cve/CVE-2024-9206.htmlWed, 17 Jun 2026 08:24:08 +0000MEDIUM 6.1: The MAS Companies For WP Job Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.0.13. This makes it possible for unauthenticated attackers to inject arbitrary webhttps://patchthecve.com/cve/CVE-2024-8483.htmlhttps://patchthecve.com/cve/CVE-2024-8483.htmlWed, 17 Jun 2026 08:22:43 +0000MEDIUM 4.3: The MAS Static Content plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.8 via the static_content() function. This makes it possible for authenticated attackers, with contributor-level access and above, to extract potentially sensitive information f