https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-9702.htmlhttps://patchthecve.com/cve/CVE-2024-9702.htmlWed, 17 Jun 2026 08:25:05 +0000MEDIUM 6.4: The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'socialrocket-floating' shortcode in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makehttps://patchthecve.com/cve/CVE-2024-9697.htmlhttps://patchthecve.com/cve/CVE-2024-9697.htmlWed, 17 Jun 2026 08:25:04 +0000MEDIUM 5.3: The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tweet_settings_save() and tweet_settings_update() functions in all versions up to, and including, 1.3.4. This makes it possible for authenticatedhttps://patchthecve.com/cve/CVE-2024-37258.htmlhttps://patchthecve.com/cve/CVE-2024-37258.htmlWed, 17 Jun 2026 07:38:01 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Social Rocket allows Reflected XSS.This issue affects Social Rocket: from n/a through 1.3.3.