Unknown Wp Education vulnerabilities

• devitems wp education WordPress WP Education for Elementor plugin <= 1.2.8 - Stored Cross Site Scripting (XSS) vulnerability CVE-2024-49630 6.5 MediumOctober 20, 2024
• hasthemes wp education WP Education < 1.2.7 - Arbitrary Plugin Activation via CSRF CVE-2023-0498 4.3 MediumMarch 27, 2023