https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-54266.htmlhttps://patchthecve.com/cve/CVE-2024-54266.htmlWed, 17 Jun 2026 08:10:01 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ImageRecycle ImageRecycle pdf & image compression imagerecycle-pdf-image-compression allows Reflected XSS.This issue affects ImageRecycle pdf & image compression: from n/a through <= 3.1.16.https://patchthecve.com/cve/CVE-2024-8120.htmlhttps://patchthecve.com/cve/CVE-2024-8120.htmlWed, 17 Jun 2026 08:21:55 +0000MEDIUM 4.7: The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.14. This is due to missing or incorrect nonce validation on several functions in the class/class-image-otimizer.php file. This makes it possible for unahttps://patchthecve.com/cve/CVE-2024-6631.htmlhttps://patchthecve.com/cve/CVE-2024-6631.htmlWed, 17 Jun 2026 08:18:22 +0000MEDIUM 5.0: The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions in all versions up to, and including, 3.1.14. This makes it possible for authenticated attackers, with Subscriber-level access an