https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-3865.htmlhttps://patchthecve.com/cve/CVE-2022-3865.htmlWed, 17 Jun 2026 05:00:27 +0000HIGH 8.8: The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as adminhttps://patchthecve.com/cve/CVE-2022-3849.htmlhttps://patchthecve.com/cve/CVE-2022-3849.htmlWed, 17 Jun 2026 05:00:25 +0000HIGH 8.8: The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as adminhttps://patchthecve.com/cve/CVE-2022-3848.htmlhttps://patchthecve.com/cve/CVE-2022-3848.htmlWed, 17 Jun 2026 05:00:25 +0000HIGH 8.8: The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin