https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-21420.htmlhttps://patchthecve.com/cve/CVE-2021-21420.htmlWed, 17 Jun 2026 03:35:32 +0000HIGH 7.5: vscode-stripe is an extension for Visual Studio Code. A vulnerability in Stripe for Visual Studio Code extension exists when it loads an untrusted source-code repository containing malicious settings. An attacker who successfully exploited the vulnerability could run arbitrary code in the context ofhttps://patchthecve.com/cve/CVE-2015-9529.htmlhttps://patchthecve.com/cve/CVE-2015-9529.htmlWed, 17 Jun 2026 00:36:42 +0000MEDIUM 6.1: The Easy Digital Downloads (EDD) Stripe extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.https://patchthecve.com/cve/CVE-2015-9374.htmlhttps://patchthecve.com/cve/CVE-2015-9374.htmlWed, 17 Jun 2026 00:36:23 +0000MEDIUM 6.1: Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg().