https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-26532.htmlhttps://patchthecve.com/cve/CVE-2023-26532.htmlWed, 17 Jun 2026 05:43:31 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in AccessPress Themes Social Auto Poster plugin <= 2.1.4 versions.https://patchthecve.com/cve/CVE-2023-26518.htmlhttps://patchthecve.com/cve/CVE-2023-26518.htmlWed, 17 Jun 2026 05:43:29 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in AccessPress Themes WP TFeed plugin <= 1.6.9 versions.https://patchthecve.com/cve/CVE-2022-4946.htmlhttps://patchthecve.com/cve/CVE-2022-4946.htmlWed, 17 Jun 2026 05:22:22 +0000MEDIUM 5.4: The Frontend Post WordPress Plugin WordPress plugin through 2.8.4 does not validate an attribute of one of its shortcode, which could allow users with a role as low as contributor to add a malicious shortcode to a page/post, which will redirect users to an arbitrary domain.https://patchthecve.com/cve/CVE-2023-28661.htmlhttps://patchthecve.com/cve/CVE-2023-28661.htmlWed, 17 Jun 2026 05:48:29 +0000HIGH 8.8: The WP Popup Banners WordPress Plugin, version <= 1.2.5, is affected by an authenticated SQL injection vulnerability in the 'value' parameter in the get_popup_data action.https://patchthecve.com/cve/CVE-2023-0175.htmlhttps://patchthecve.com/cve/CVE-2023-0175.htmlWed, 17 Jun 2026 05:24:57 +0000MEDIUM 5.4: The Responsive Clients Logo Gallery Plugin for WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Sit