PatchTheCVE: nicheaddonshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-12061: The Events Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up thttps://patchthecve.com/cve/CVE-2024-12061.htmlhttps://patchthecve.com/cve/CVE-2024-12061.htmlWed, 17 Jun 2026 06:58:58 +0000MEDIUM 4.3: The Events Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2.3 via the naevents_elementor_template shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, witCVE-2024-54316: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddhttps://patchthecve.com/cve/CVE-2024-54316.htmlhttps://patchthecve.com/cve/CVE-2024-54316.htmlWed, 17 Jun 2026 08:10:07 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Restaurant & Cafe Addon for Elementor restaurant-cafe-addon-for-elementor allows DOM-Based XSS.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through <= 1.5.8.CVE-2024-54315: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddhttps://patchthecve.com/cve/CVE-2024-54315.htmlhttps://patchthecve.com/cve/CVE-2024-54315.htmlWed, 17 Jun 2026 08:10:07 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Events Addon for Elementor events-addon-for-elementor allows DOM-Based XSS.This issue affects Events Addon for Elementor: from n/a through <= 2.2.2.CVE-2024-54314: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddhttps://patchthecve.com/cve/CVE-2024-54314.htmlhttps://patchthecve.com/cve/CVE-2024-54314.htmlWed, 17 Jun 2026 08:10:07 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Primary Addon for Elementor primary-addon-for-elementor allows Stored XSS.This issue affects Primary Addon for Elementor: from n/a through <= 1.6.0.CVE-2023-47826: Missing Authorization vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Exploiting Inchttps://patchthecve.com/cve/CVE-2023-47826.htmlhttps://patchthecve.com/cve/CVE-2023-47826.htmlWed, 17 Jun 2026 06:33:21 +0000MEDIUM 6.5: Missing Authorization vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through 1.5.3.CVE-2024-12062: The Charity Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up https://patchthecve.com/cve/CVE-2024-12062.htmlhttps://patchthecve.com/cve/CVE-2024-12062.htmlWed, 17 Jun 2026 06:58:58 +0000MEDIUM 4.3: The Charity Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.3 via the 'nacharity_elementor_template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers,CVE-2024-10780: The Restaurant & Cafe Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all vehttps://patchthecve.com/cve/CVE-2024-10780.htmlhttps://patchthecve.com/cve/CVE-2024-10780.htmlWed, 17 Jun 2026 06:56:25 +0000MEDIUM 4.3: The Restaurant & Cafe Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.5.9 via the 'narestaurant_elementor_template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticatCVE-2024-10670: The Primary Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up https://patchthecve.com/cve/CVE-2024-10670.htmlhttps://patchthecve.com/cve/CVE-2024-10670.htmlWed, 17 Jun 2026 06:56:09 +0000MEDIUM 4.3: The Primary Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.6.2 via the [prim_elementor_template] shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, withCVE-2024-51938: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddhttps://patchthecve.com/cve/CVE-2024-51938.htmlhttps://patchthecve.com/cve/CVE-2024-51938.htmlWed, 17 Jun 2026 08:06:35 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Charity Addon for Elementor charity-addon-for-elementor allows DOM-Based XSS.This issue affects Charity Addon for Elementor: from n/a through <= 1.3.2.CVE-2024-51581: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddhttps://patchthecve.com/cve/CVE-2024-51581.htmlhttps://patchthecve.com/cve/CVE-2024-51581.htmlWed, 17 Jun 2026 08:05:58 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Restaurant & Cafe Addon for Elementor restaurant-cafe-addon-for-elementor allows Stored XSS.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through <= 1.5.6.CVE-2024-51585: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddhttps://patchthecve.com/cve/CVE-2024-51585.htmlhttps://patchthecve.com/cve/CVE-2024-51585.htmlWed, 17 Jun 2026 08:05:58 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Sales Page Addon – Elementor & Beaver Builder sales-page-addon allows Stored XSS.This issue affects Sales Page Addon – Elementor & Beaver Builder: from n/a through <= 1.4.5.CVE-2024-49264: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddhttps://patchthecve.com/cve/CVE-2024-49264.htmlhttps://patchthecve.com/cve/CVE-2024-49264.htmlWed, 17 Jun 2026 07:59:36 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Events Addon for Elementor events-addon-for-elementor allows Stored XSS.This issue affects Events Addon for Elementor: from n/a through <= 2.2.0.CVE-2024-49259: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddhttps://patchthecve.com/cve/CVE-2024-49259.htmlhttps://patchthecve.com/cve/CVE-2024-49259.htmlWed, 17 Jun 2026 07:59:35 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Primary Addon for Elementor primary-addon-for-elementor allows Stored XSS.This issue affects Primary Addon for Elementor: from n/a through <= 1.5.8.CVE-2024-44033: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddhttps://patchthecve.com/cve/CVE-2024-44033.htmlhttps://patchthecve.com/cve/CVE-2024-44033.htmlWed, 17 Jun 2026 07:52:11 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Primary Addon for Elementor primary-addon-for-elementor allows Stored XSS.This issue affects Primary Addon for Elementor: from n/a through <= 1.5.7.CVE-2024-44032: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddhttps://patchthecve.com/cve/CVE-2024-44032.htmlhttps://patchthecve.com/cve/CVE-2024-44032.htmlWed, 17 Jun 2026 07:52:11 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Restaurant & Cafe Addon for Elementor restaurant-cafe-addon-for-elementor allows Stored XSS.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through <= 1.5.5.CVE-2024-44026: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddhttps://patchthecve.com/cve/CVE-2024-44026.htmlhttps://patchthecve.com/cve/CVE-2024-44026.htmlWed, 17 Jun 2026 07:52:10 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Charity Addon for Elementor charity-addon-for-elementor allows Stored XSS.This issue affects Charity Addon for Elementor: from n/a through <= 1.3.0.CVE-2024-4669: The Events Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Basichttps://patchthecve.com/cve/CVE-2024-4669.htmlhttps://patchthecve.com/cve/CVE-2024-4669.htmlWed, 17 Jun 2026 08:02:22 +0000MEDIUM 6.4: The Events Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Basic Slider, Upcoming Events, and Schedule widgets in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes