https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-2330.htmlhttps://patchthecve.com/cve/CVE-2025-2330.htmlWed, 17 Jun 2026 09:06:46 +0000MEDIUM 6.4: The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button+modal' widget in all versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it phttps://patchthecve.com/cve/CVE-2024-10321.htmlhttps://patchthecve.com/cve/CVE-2024-10321.htmlWed, 17 Jun 2026 06:55:24 +0000MEDIUM 4.3: The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.5 in elements/advanced-tab/template/view.php. This makes it possible for authenticated attackers, with Contributor-level access and above, tohttps://patchthecve.com/cve/CVE-2024-37428.htmlhttps://patchthecve.com/cve/CVE-2024-37428.htmlWed, 17 Jun 2026 07:38:21 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themesgrove WidgetKit allows Stored XSS.This issue affects WidgetKit: from n/a through 2.5.0.https://patchthecve.com/cve/CVE-2024-2137.htmlhttps://patchthecve.com/cve/CVE-2024-2137.htmlWed, 17 Jun 2026 07:23:47 +0000MEDIUM 6.4: The All-in-One Addons for Elementor – WidgetKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple pricing widgets (e.g. Pricing Single, Pricing Icon, Pricing Tab) in all versions up to, and including, 2.5.1 due to insufficient input sanitization and output escaping. This