https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2010-3305.htmlhttps://patchthecve.com/cve/CVE-2010-3305.htmlTue, 16 Jun 2026 23:22:33 +0000HIGH 8.8: Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password.https://patchthecve.com/cve/CVE-2009-4900.htmlhttps://patchthecve.com/cve/CVE-2009-4900.htmlTue, 16 Jun 2026 23:14:34 +0000MEDIUM 6.1: pixelpost 1.7.1 has XSShttps://patchthecve.com/cve/CVE-2009-4899.htmlhttps://patchthecve.com/cve/CVE-2009-4899.htmlTue, 16 Jun 2026 23:14:34 +0000CRITICAL 9.8: pixelpost 1.7.1 has SQL injectionhttps://patchthecve.com/cve/CVE-2018-0606.htmlhttps://patchthecve.com/cve/CVE-2018-0606.htmlWed, 17 Jun 2026 01:31:17 +0000HIGH 7.2: SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.https://patchthecve.com/cve/CVE-2018-0605.htmlhttps://patchthecve.com/cve/CVE-2018-0605.htmlWed, 17 Jun 2026 01:31:17 +0000MEDIUM 6.1: Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.https://patchthecve.com/cve/CVE-2018-0604.htmlhttps://patchthecve.com/cve/CVE-2018-0604.htmlWed, 17 Jun 2026 01:31:17 +0000HIGH 7.2: Pixelpost v1.7.3 and earlier allows remote code execution via unspecified vectors.