https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-43014.htmlhttps://patchthecve.com/cve/CVE-2025-43014.htmlWed, 17 Jun 2026 09:23:24 +0000MEDIUM 6.1: In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmationhttps://patchthecve.com/cve/CVE-2025-43013.htmlhttps://patchthecve.com/cve/CVE-2025-43013.htmlWed, 17 Jun 2026 09:23:23 +0000MEDIUM 6.9: In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possiblehttps://patchthecve.com/cve/CVE-2025-43012.htmlhttps://patchthecve.com/cve/CVE-2025-43012.htmlWed, 17 Jun 2026 09:23:23 +0000HIGH 8.3: In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possiblehttps://patchthecve.com/cve/CVE-2025-42921.htmlhttps://patchthecve.com/cve/CVE-2025-42921.htmlWed, 17 Jun 2026 09:23:14 +0000MEDIUM 4.2: In JetBrains Toolbox App before 2.6 host key verification was missing in SSH pluginhttps://patchthecve.com/cve/CVE-2024-9177.htmlhttps://patchthecve.com/cve/CVE-2024-9177.htmlWed, 17 Jun 2026 08:24:05 +0000MEDIUM 6.4: The Themedy Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's themedy_col, themedy_social_link, themedy_alertbox, and themedy_pullleft shortcodes in all versions up to, and including, 1.0.14, and up to, and including 1.0.15 for the plugin's themedy_button sho