https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-30456.htmlhttps://patchthecve.com/cve/CVE-2024-30456.htmlWed, 17 Jun 2026 07:27:00 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WPCS.This issue affects WPCS: from n/a through 1.2.0.1.https://patchthecve.com/cve/CVE-2023-51506.htmlhttps://patchthecve.com/cve/CVE-2023-51506.htmlWed, 17 Jun 2026 06:41:05 +0000MEDIUM 5.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WPCS – WordPress Currency Switcher Professional allows Stored XSS.This issue affects WPCS – WordPress Currency Switcher Professional: from n/a through 1.2.0.https://patchthecve.com/cve/CVE-2023-2556.htmlhttps://patchthecve.com/cve/CVE-2023-2556.htmlWed, 17 Jun 2026 05:52:50 +0000MEDIUM 4.3: The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the anonymous function for the wpcs_sd_delete action in versions up to, and including, 1.1.9. This makes it possible for authenticated attahttps://patchthecve.com/cve/CVE-2021-20780.htmlhttps://patchthecve.com/cve/CVE-2021-20780.htmlWed, 17 Jun 2026 03:34:26 +0000HIGH 8.8: Cross-site request forgery (CSRF) vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.