https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-3977.htmlhttps://patchthecve.com/cve/CVE-2023-3977.htmlWed, 17 Jun 2026 06:15:33 +0000MEDIUM 4.3: Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible for unauthehttps://patchthecve.com/cve/CVE-2023-0958.htmlhttps://patchthecve.com/cve/CVE-2023-0958.htmlWed, 17 Jun 2026 05:26:44 +0000MEDIUM 4.3: Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible for authenticated attackers with minhttps://patchthecve.com/cve/CVE-2021-43408.htmlhttps://patchthecve.com/cve/CVE-2021-43408.htmlWed, 17 Jun 2026 04:10:55 +0000MEDIUM 6.5: The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection. SQL injection vulnerabilities occur when client supplied data is included within an SQL Query insecurely. SQL Injection can typically be exploited to read, modify and delete SQL table data. In man