PatchTheCVE: migawebhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-47542: Cross-Site Request Forgery (CSRF) vulnerability in Michael Simple calendar for Elementor simple-calendar-for-ehttps://patchthecve.com/cve/CVE-2025-47542.htmlhttps://patchthecve.com/cve/CVE-2025-47542.htmlWed, 17 Jun 2026 09:28:17 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Michael Simple calendar for Elementor simple-calendar-for-elementor allows Cross Site Request Forgery.This issue affects Simple calendar for Elementor: from n/a through <= 1.6.5.CVE-2025-46249: Cross-Site Request Forgery (CSRF) vulnerability in Michael Simple calendar for Elementor simple-calendar-for-ehttps://patchthecve.com/cve/CVE-2025-46249.htmlhttps://patchthecve.com/cve/CVE-2025-46249.htmlWed, 17 Jun 2026 09:26:05 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Michael Simple calendar for Elementor simple-calendar-for-elementor allows Cross Site Request Forgery.This issue affects Simple calendar for Elementor: from n/a through <= 1.6.4.CVE-2025-46225: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael https://patchthecve.com/cve/CVE-2025-46225.htmlhttps://patchthecve.com/cve/CVE-2025-46225.htmlWed, 17 Jun 2026 09:26:03 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Post in page for Elementor allows DOM-Based XSS. This issue affects Post in page for Elementor: from n/a through 1.0.1.CVE-2024-51685: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Mhttps://patchthecve.com/cve/CVE-2024-51685.htmlhttps://patchthecve.com/cve/CVE-2024-51685.htmlWed, 17 Jun 2026 08:06:08 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Michael Gangolf Accordion title for Elementor allows Stored XSS.This issue affects Accordion title for Elementor: from n/a through 1.2.1.CVE-2024-51683: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael https://patchthecve.com/cve/CVE-2024-51683.htmlhttps://patchthecve.com/cve/CVE-2024-51683.htmlWed, 17 Jun 2026 08:06:08 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Custom post type templates for Elementor custom-post-type-templates-for-elementor allows Stored XSS.This issue affects Custom post type templates for Elementor: from n/a through <= 1.10.1.