https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-12680.htmlhttps://patchthecve.com/cve/CVE-2024-12680.htmlWed, 17 Jun 2026 07:00:16 +0000MEDIUM 4.8: The Prisna GWT WordPress plugin before 1.4.14 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).https://patchthecve.com/cve/CVE-2024-12679.htmlhttps://patchthecve.com/cve/CVE-2024-12679.htmlWed, 17 Jun 2026 07:00:16 +0000MEDIUM 4.8: The Prisna GWT WordPress plugin before 1.4.14 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).https://patchthecve.com/cve/CVE-2024-8514.htmlhttps://patchthecve.com/cve/CVE-2024-8514.htmlWed, 17 Jun 2026 08:22:46 +0000CRITICAL 9.1: The Prisna GWT – Google Website Translator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.11 via deserialization of untrusted input from the 'prisna_import' parameter. This makes it possible for authenticated attackers, with Administrator-level a