https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3452.htmlhttps://patchthecve.com/cve/CVE-2025-3452.htmlWed, 17 Jun 2026 09:19:58 +0000MEDIUM 4.3: The SecuPress Free — WordPress Security plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'secupress_reinstall_plugins_admin_ajax_cb' function in all versions up to, and including, 2.3.9. This makes it possible for authenticated attackerhttps://patchthecve.com/cve/CVE-2025-30907.htmlhttps://patchthecve.com/cve/CVE-2025-30907.htmlWed, 17 Jun 2026 09:09:33 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SecuPress SecuPress Free secupress allows DOM-Based XSS.This issue affects SecuPress Free: from n/a through <= 2.2.5.3.https://patchthecve.com/cve/CVE-2024-9019.htmlhttps://patchthecve.com/cve/CVE-2024-9019.htmlWed, 17 Jun 2026 08:23:47 +0000MEDIUM 6.4: The SecuPress Free — WordPress Security plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's secupress_check_ban_ips_form shortcode in all versions up to, and including, 2.2.5.3 due to insufficient input sanitization and output escaping on user supplied attributes. This