https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-1849.htmlhttps://patchthecve.com/cve/CVE-2024-1849.htmlWed, 17 Jun 2026 07:05:08 +0000MEDIUM 5.4: The WP Customer Reviews WordPress plugin before 3.7.1 does not validate a parameter allowing contributor and above users to redirect a page to a malicious URLhttps://patchthecve.com/cve/CVE-2023-4686.htmlhttps://patchthecve.com/cve/CVE-2023-4686.htmlWed, 17 Jun 2026 06:38:22 +0000MEDIUM 4.3: The WP Customer Reviews plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.6.6 via the ajax_enabled_posts function. This can allow authenticated attackers to extract sensitive data such as post titles and slugs, including those of protected and thttps://patchthecve.com/cve/CVE-2023-4648.htmlhttps://patchthecve.com/cve/CVE-2023-4648.htmlWed, 17 Jun 2026 06:38:17 +0000MEDIUM 4.4: The WP Customer Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.6.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an