https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-1440.htmlhttps://patchthecve.com/cve/CVE-2025-1440.htmlWed, 17 Jun 2026 08:39:08 +0000MEDIUM 5.3: The Advanced iFrame plugin for WordPress is vulnerable to unauthorized excessive creation of options on the aip_map_url_callback() function in all versions up to, and including, 2024.5 due to insufficient restrictions. This makes it possible for unauthenticated attackers to update the advancediFramehttps://patchthecve.com/cve/CVE-2025-1439.htmlhttps://patchthecve.com/cve/CVE-2025-1439.htmlWed, 17 Jun 2026 08:39:08 +0000MEDIUM 6.4: The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advanced_iframe' shortcode in all versions up to, and including, 2024.5 due to insufficient input sanitization and output escaping on user supplied attributes through the 'src' attribute when the https://patchthecve.com/cve/CVE-2025-1437.htmlhttps://patchthecve.com/cve/CVE-2025-1437.htmlWed, 17 Jun 2026 08:39:08 +0000MEDIUM 6.4: The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advanced_iframe' shortcode in all versions up to, and including, 2025.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authentichttps://patchthecve.com/cve/CVE-2024-1341.htmlhttps://patchthecve.com/cve/CVE-2024-1341.htmlWed, 17 Jun 2026 07:04:01 +0000MEDIUM 4.9: The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's advanced_iframe shortcode in all versions up to, and including, 2024.1 due to the plugin allowing users to include JS files from external sources through the additional_js attribute. This makes it https://patchthecve.com/cve/CVE-2023-51690.htmlhttps://patchthecve.com/cve/CVE-2023-51690.htmlWed, 17 Jun 2026 06:41:28 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Advanced iFrame allows Stored XSS.This issue affects Advanced iFrame: from n/a through 2023.8.https://patchthecve.com/cve/CVE-2023-7069.htmlhttps://patchthecve.com/cve/CVE-2023-7069.htmlWed, 17 Jun 2026 06:51:59 +0000MEDIUM 6.4: The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advanced_iframe' shortcode in all versions up to, and including, 2023.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenti