https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-44867.htmlhttps://patchthecve.com/cve/CVE-2024-44867.htmlWed, 17 Jun 2026 07:53:12 +0000HIGH 7.5: phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php.https://patchthecve.com/cve/CVE-2024-38953.htmlhttps://patchthecve.com/cve/CVE-2024-38953.htmlWed, 17 Jun 2026 07:41:17 +0000MEDIUM 6.1: phpok 6.4.003 contains a Cross Site Scripting (XSS) vulnerability in the ok_f() method under the framework/api/upload_control.php file.https://patchthecve.com/cve/CVE-2023-29881.htmlhttps://patchthecve.com/cve/CVE-2023-29881.htmlWed, 17 Jun 2026 05:50:59 +0000MEDIUM 6.5: phpok 6.4.003 is vulnerable to SQL injection in the function index_f() in phpok64/framework/api/call_control.php.https://patchthecve.com/cve/CVE-2020-21486.htmlhttps://patchthecve.com/cve/CVE-2020-21486.htmlWed, 17 Jun 2026 03:03:42 +0000HIGH 7.5: SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the _userlist function in framerwork/phpok_call.php file.https://patchthecve.com/cve/CVE-2023-33601.htmlhttps://patchthecve.com/cve/CVE-2023-33601.htmlWed, 17 Jun 2026 06:01:58 +0000HIGH 8.8: An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary code via a crafted PHP file.