https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-34370.htmlhttps://patchthecve.com/cve/CVE-2024-34370.htmlWed, 17 Jun 2026 07:33:15 +0000HIGH 7.2: Improper Privilege Management vulnerability in WPFactory EAN for WooCommerce allows Privilege Escalation.This issue affects EAN for WooCommerce: from n/a through 4.8.9.https://patchthecve.com/cve/CVE-2023-6897.htmlhttps://patchthecve.com/cve/CVE-2023-6897.htmlWed, 17 Jun 2026 06:51:38 +0000MEDIUM 4.3: The EAN for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.9.2 via the the 'alg_wc_ean_product_meta' shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with conthttps://patchthecve.com/cve/CVE-2023-6892.htmlhttps://patchthecve.com/cve/CVE-2023-6892.htmlWed, 17 Jun 2026 06:51:37 +0000MEDIUM 6.4: The EAN for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'alg_wc_ean_product_meta' shortcode in all versions up to, and including, 4.8.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fohttps://patchthecve.com/cve/CVE-2023-0062.htmlhttps://patchthecve.com/cve/CVE-2023-0062.htmlWed, 28 Oct 2026 19:10:00 +0000MEDIUM 5.4: The EAN for WooCommerce WordPress plugin before 4.4.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.