https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-13486.htmlhttps://patchthecve.com/cve/CVE-2024-13486.htmlWed, 17 Jun 2026 07:02:06 +0000MEDIUM 4.8: The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).https://patchthecve.com/cve/CVE-2024-13482.htmlhttps://patchthecve.com/cve/CVE-2024-13482.htmlWed, 17 Jun 2026 07:02:06 +0000MEDIUM 4.8: The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).https://patchthecve.com/cve/CVE-2024-12302.htmlhttps://patchthecve.com/cve/CVE-2024-12302.htmlWed, 17 Jun 2026 06:59:27 +0000MEDIUM 6.1: The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform Stored Cross-Site Scripting attacks