https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-13123.htmlhttps://patchthecve.com/cve/CVE-2024-13123.htmlWed, 17 Jun 2026 07:01:15 +0000LOW 3.5: The AFI WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).https://patchthecve.com/cve/CVE-2024-13122.htmlhttps://patchthecve.com/cve/CVE-2024-13122.htmlWed, 17 Jun 2026 07:01:15 +0000LOW 3.5: The AFI WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).https://patchthecve.com/cve/CVE-2024-10877.htmlhttps://patchthecve.com/cve/CVE-2024-10877.htmlWed, 17 Jun 2026 06:56:36 +0000MEDIUM 6.1: The AFI – The Easiest Integration Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.92.0. This makes it possible for unauthenticated attackers https://patchthecve.com/cve/CVE-2024-43340.htmlhttps://patchthecve.com/cve/CVE-2024-43340.htmlWed, 17 Jun 2026 07:50:49 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Nasirahmed Advanced Form Integration.This issue affects Advanced Form Integration: from n/a through 1.89.4.