https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-0385.htmlhttps://patchthecve.com/cve/CVE-2024-0385.htmlWed, 17 Jun 2026 06:53:23 +0000MEDIUM 4.3: The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the categorifyAjaxAddCategory function in all versions up to, and including, 1.0.7.4. This makes it possible for authenticated attackers, with subscriber-level access and abovehttps://patchthecve.com/cve/CVE-2024-1912.htmlhttps://patchthecve.com/cve/CVE-2024-1912.htmlWed, 17 Jun 2026 07:05:16 +0000MEDIUM 4.3: The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxUpdateFolderPosition function. This makes it possible for unauthenticated attackers to update the fhttps://patchthecve.com/cve/CVE-2024-1910.htmlhttps://patchthecve.com/cve/CVE-2024-1910.htmlWed, 17 Jun 2026 07:05:16 +0000MEDIUM 4.3: The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxClearCategory function. This makes it possible for unauthenticated attackers to clear categories vihttps://patchthecve.com/cve/CVE-2024-1909.htmlhttps://patchthecve.com/cve/CVE-2024-1909.htmlWed, 17 Jun 2026 07:05:16 +0000MEDIUM 4.3: The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxRenameCategory function. This makes it possible for unauthenticated attackers to rename categories https://patchthecve.com/cve/CVE-2024-1907.htmlhttps://patchthecve.com/cve/CVE-2024-1907.htmlWed, 17 Jun 2026 07:05:15 +0000MEDIUM 4.3: The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxDeleteCategory function. This makes it possible for unauthenticated attackers to delete categories https://patchthecve.com/cve/CVE-2024-1906.htmlhttps://patchthecve.com/cve/CVE-2024-1906.htmlWed, 17 Jun 2026 07:05:15 +0000MEDIUM 4.3: The Categorify plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7.4. This is due to missing or incorrect nonce validation on the categorifyAjaxAddCategory function. This makes it possible for unauthenticated attackers to add categories via a https://patchthecve.com/cve/CVE-2024-1653.htmlhttps://patchthecve.com/cve/CVE-2024-1653.htmlWed, 17 Jun 2026 07:04:42 +0000MEDIUM 4.3: The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the categorifyAjaxUpdateFolderPosition in all versions up to, and including, 1.0.7.4. This makes it possible for authenticated attackers, with subscriber-level access and abovehttps://patchthecve.com/cve/CVE-2024-1652.htmlhttps://patchthecve.com/cve/CVE-2024-1652.htmlWed, 17 Jun 2026 07:04:42 +0000MEDIUM 4.3: The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the categorifyAjaxClearCategory function in all versions up to, and including, 1.0.7.4. This makes it possible for authenticated attackers, with subscriber-level access and abohttps://patchthecve.com/cve/CVE-2024-1650.htmlhttps://patchthecve.com/cve/CVE-2024-1650.htmlWed, 17 Jun 2026 07:04:42 +0000MEDIUM 4.3: The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the categorifyAjaxRenameCategory function in all versions up to, and including, 1.0.7.4. This makes it possible for authenticated attackers, with subscriber-level access and abhttps://patchthecve.com/cve/CVE-2024-1649.htmlhttps://patchthecve.com/cve/CVE-2024-1649.htmlWed, 17 Jun 2026 07:04:42 +0000MEDIUM 4.3: The Categorify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the categorifyAjaxDeleteCategory function in all versions up to, and including, 1.0.7.4. This makes it possible for authenticated attackers, with subscriber-level access and ab