https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-0433.htmlhttps://patchthecve.com/cve/CVE-2024-0433.htmlWed, 17 Jun 2026 06:53:29 +0000MEDIUM 4.3: The Gestpay for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 20221130. This is due to missing or incorrect nonce validation on the 'ajax_unset_default_card' function. This makes it possible for unauthenticated attackers to remove https://patchthecve.com/cve/CVE-2024-0432.htmlhttps://patchthecve.com/cve/CVE-2024-0432.htmlWed, 17 Jun 2026 06:53:29 +0000MEDIUM 4.3: The Gestpay for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 20221130. This is due to missing or incorrect nonce validation on the 'ajax_delete_card' function. This makes it possible for unauthenticated attackers to delete the defhttps://patchthecve.com/cve/CVE-2024-0431.htmlhttps://patchthecve.com/cve/CVE-2024-0431.htmlWed, 17 Jun 2026 06:53:29 +0000MEDIUM 4.3: The Gestpay for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 20221130. This is due to missing or incorrect nonce validation on the 'ajax_set_default_card' function. This makes it possible for unauthenticated attackers to set the d