https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-44061.htmlhttps://patchthecve.com/cve/CVE-2024-44061.htmlWed, 17 Jun 2026 07:52:14 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory EU/UK VAT Manager for WooCommerce eu-vat-for-woocommerce.This issue affects EU/UK VAT Manager for WooCommerce: from n/a through <= 2.12.14.https://patchthecve.com/cve/CVE-2024-9189.htmlhttps://patchthecve.com/cve/CVE-2024-9189.htmlWed, 17 Jun 2026 08:24:06 +0000MEDIUM 5.3: The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the alg_wc_eu_vat_exempt_vat_from_admin() function in all versions up to, and including, 2.12.12. This makes it possible for unauthenticated attackers tohttps://patchthecve.com/cve/CVE-2024-8788.htmlhttps://patchthecve.com/cve/CVE-2024-8788.htmlWed, 17 Jun 2026 08:23:18 +0000MEDIUM 6.1: The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.12.11. This makes it possible for unauthenticated attackers to inject arbitrary w