https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-25213.htmlhttps://patchthecve.com/cve/CVE-2019-25213.htmlWed, 17 Jun 2026 02:31:45 +0000CRITICAL 9.8: The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive files shttps://patchthecve.com/cve/CVE-2024-29127.htmlhttps://patchthecve.com/cve/CVE-2024-29127.htmlWed, 17 Jun 2026 07:22:28 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AAM Advanced Access Manager allows Reflected XSS.This issue affects Advanced Access Manager: from n/a through 6.9.20.https://patchthecve.com/cve/CVE-2023-51674.htmlhttps://patchthecve.com/cve/CVE-2023-51674.htmlWed, 17 Jun 2026 06:41:26 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More allows Stored XSS.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhancedhttps://patchthecve.com/cve/CVE-2023-51675.htmlhttps://patchthecve.com/cve/CVE-2023-51675.htmlWed, 17 Jun 2026 06:41:26 +0000MEDIUM 4.7: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More: from n/a through 6.9.18.https://patchthecve.com/cve/CVE-2023-50881.htmlhttps://patchthecve.com/cve/CVE-2023-50881.htmlWed, 17 Jun 2026 06:40:09 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More allows Stored XSS.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhanced