https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-22714.htmlhttps://patchthecve.com/cve/CVE-2023-22714.htmlWed, 17 Jun 2026 05:36:01 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Coming Soon by Supsystic plugin <= 1.7.10 versions.https://patchthecve.com/cve/CVE-2022-1322.htmlhttps://patchthecve.com/cve/CVE-2022-1322.htmlWed, 17 Jun 2026 04:22:13 +0000MEDIUM 4.8: The Coming Soon - Under Construction WordPress plugin through 1.1.9 does not sanitize and escape some of its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowedhttps://patchthecve.com/cve/CVE-2021-46781.htmlhttps://patchthecve.com/cve/CVE-2021-46781.htmlWed, 17 Jun 2026 04:15:33 +0000MEDIUM 6.1: The Coming Soon by Supsystic WordPress plugin before 1.7.6 does not sanitise and escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting