https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-20193.htmlhttps://patchthecve.com/cve/CVE-2017-20193.htmlWed, 17 Jun 2026 01:15:22 +0000MEDIUM 4.7: The Product Vendors is vulnerable to Reflected Cross-Site Scripting via the 'vendor_description' parameter in versions up to, and including, 2.0.35 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pagehttps://patchthecve.com/cve/CVE-2023-52186.htmlhttps://patchthecve.com/cve/CVE-2023-52186.htmlWed, 17 Jun 2026 06:42:15 +0000MEDIUM 5.3: Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.2.https://patchthecve.com/cve/CVE-2023-51494.htmlhttps://patchthecve.com/cve/CVE-2023-51494.htmlWed, 17 Jun 2026 06:41:04 +0000MEDIUM 5.3: Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.1.