https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-13901.htmlhttps://patchthecve.com/cve/CVE-2024-13901.htmlWed, 17 Jun 2026 07:02:57 +0000MEDIUM 4.4: The Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘content’ parameter in all versions up to, and including, 2.0.6 due to insufficient input sanitization and output escaping. This makehttps://patchthecve.com/cve/CVE-2025-24715.htmlhttps://patchthecve.com/cve/CVE-2025-24715.htmlWed, 17 Jun 2026 08:59:29 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Counter Box counter-box allows Cross Site Request Forgery.This issue affects Counter Box: from n/a through <= 2.0.5.https://patchthecve.com/cve/CVE-2024-3481.htmlhttps://patchthecve.com/cve/CVE-2024-3481.htmlWed, 17 Jun 2026 07:44:21 +0000MEDIUM 5.2: The Counter Box WordPress plugin before 1.2.4 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such deleting counters via CSRF attacks