https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-13773.htmlhttps://patchthecve.com/cve/CVE-2024-13773.htmlWed, 17 Jun 2026 07:02:41 +0000HIGH 7.3: The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via hard-coded credentials. This makes it possible for unauthenticated attackers to extract sensitive data including LinkedIn https://patchthecve.com/cve/CVE-2024-13772.htmlhttps://patchthecve.com/cve/CVE-2024-13772.htmlWed, 17 Jun 2026 07:02:41 +0000MEDIUM 5.6: The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.1.6.1. This is due to a lack of password randomization and user validation through the fb_ajax_login_or_register and google_ajax_login_or_rhttps://patchthecve.com/cve/CVE-2024-13771.htmlhttps://patchthecve.com/cve/CVE-2024-13771.htmlWed, 17 Jun 2026 07:02:41 +0000CRITICAL 9.8: The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.1.4. This is due to a lack of user validation before changing a password. This makes it possible for unauthenticated attackers to change th