https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-11601.htmlhttps://patchthecve.com/cve/CVE-2024-11601.htmlWed, 17 Jun 2026 06:58:02 +0000HIGH 8.1: The Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blog, Video Gallery) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.1. This is due to missing or incorrect nonhttps://patchthecve.com/cve/CVE-2024-11104.htmlhttps://patchthecve.com/cve/CVE-2024-11104.htmlWed, 17 Jun 2026 06:57:04 +0000HIGH 8.1: The Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the save_options(https://patchthecve.com/cve/CVE-2024-9542.htmlhttps://patchthecve.com/cve/CVE-2024-9542.htmlWed, 17 Jun 2026 08:24:47 +0000MEDIUM 4.3: The Sky Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 via the render function in modules/content-switcher/widgets/content-switcher.php. This makes it possible for authenticated attackers, with Contributor-level ahttps://patchthecve.com/cve/CVE-2024-50433.htmlhttps://patchthecve.com/cve/CVE-2024-50433.htmlWed, 17 Jun 2026 08:04:28 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wowDevs Sky Addons for Elementor sky-elementor-addons allows Cross-Site Scripting (XSS).This issue affects Sky Addons for Elementor: from n/a through <= 2.5.15.https://patchthecve.com/cve/CVE-2024-47332.htmlhttps://patchthecve.com/cve/CVE-2024-47332.htmlWed, 17 Jun 2026 07:56:53 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wowDevs Sky Addons for Elementor sky-elementor-addons allows Stored XSS.This issue affects Sky Addons for Elementor: from n/a through <= 2.5.11.https://patchthecve.com/cve/CVE-2024-38687.htmlhttps://patchthecve.com/cve/CVE-2024-38687.htmlWed, 17 Jun 2026 07:40:52 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wowDevs Sky Addons for Elementor sky-elementor-addons.This issue affects Sky Addons for Elementor: from n/a through <= 2.5.5.