https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-39528.htmlhttps://patchthecve.com/cve/CVE-2025-39528.htmlWed, 17 Jun 2026 09:18:06 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rescue Themes Rescue Shortcodes rescue-shortcodes allows Stored XSS.This issue affects Rescue Shortcodes: from n/a through <= 3.1.https://patchthecve.com/cve/CVE-2024-11199.htmlhttps://patchthecve.com/cve/CVE-2024-11199.htmlWed, 17 Jun 2026 06:57:15 +0000MEDIUM 6.4: The Rescue Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rescue_progressbar shortcode in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authentichttps://patchthecve.com/cve/CVE-2024-9696.htmlhttps://patchthecve.com/cve/CVE-2024-9696.htmlWed, 17 Jun 2026 08:25:04 +0000MEDIUM 6.4: The Rescue Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rescue_tab' shortcode in all versions up to, and including, 2.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated a