Quomodosoft Elementsready vulnerabilities

• quomodosoft elementsready addons for elementor ElementsReady Addons for Elementor <= 6.7.2 - Unauthenticated Paid Download Access Bypass via 'downloadtype' Parameter CVE-2026-91047 5.3 MediumOctober 19, 2026
• quomodosoft elementsready addons for elementor ElementsReady Addons for Elementor <= 6.7.2 - Subscriber+ Plugin Settings Overwrite via Missing Authorization CVE-2026-91046 4.3 MediumOctober 19, 2026
• quomodosoft elementsready addons for elementor WordPress ElementsReady Addons for Elementor plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-39546 4.3 MediumApril 16, 2025
• quomodosoft elementsready, elementsready addons for elementor +1 more ElementsReady Addons for Elementor <= 6.4.8 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates CVE-2024-10356 4.3 MediumDecember 17, 2024
• quomodosoft elementsready, elementsready addons for elementor +1 more WordPress ElementsReady Addons for Elementor plugin <= 6.4.7 - Cross Site Scripting (XSS) vulnerability CVE-2024-54224 6.5 MediumDecember 9, 2024
• quomodosoft elementsready, elementsready addons for elementor +1 more WordPress ElementsReady Addons for Elementor plugin <= 6.4.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-51787 6.5 MediumNovember 9, 2024
• quomodosoft elementsready, elementsready addons for elementor +1 more ElementsReady Addons for Elementor <= 6.4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2024-9444 6.4 MediumOctober 16, 2024
• quomodosoft elementsready, elementsready addons for elementor +1 more WordPress ElementsReady Addons for Elementor plugin <= 6.4.2 - Open Redirection vulnerability CVE-2024-47353 4.7 MediumOctober 11, 2024
• quomodosoft elementsready, elementsready addons for elementor +1 more WordPress ElementsReady Addons for Elementor plugin <= 6.4.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-47329 6.5 MediumOctober 6, 2024
• quomodosoft elementsready, elementsready addons for elementor +1 more ElementsReady Addons for Elementor <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-5152 6.4 MediumJune 6, 2024
• quomodosoft elementsready, elementsready addons for elementor +1 more WordPress ElementsReady Addons for Elementor plugin <= 5.8.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-34374 6.5 MediumMay 6, 2024