https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-49824.htmlhttps://patchthecve.com/cve/CVE-2023-49824.htmlWed, 17 Jun 2026 06:36:33 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite Product Catalog Feed by PixelYourSite.This issue affects Product Catalog Feed by PixelYourSite: from n/a through 2.1.1.https://patchthecve.com/cve/CVE-2023-1805.htmlhttps://patchthecve.com/cve/CVE-2023-1805.htmlWed, 17 Jun 2026 05:28:47 +0000MEDIUM 6.1: The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as adminhttps://patchthecve.com/cve/CVE-2023-1804.htmlhttps://patchthecve.com/cve/CVE-2023-1804.htmlWed, 17 Jun 2026 05:28:47 +0000MEDIUM 6.1: The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the edit parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as administrators.