PatchTheCVE: adamsolymosihttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-6024: The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when deleting groups or emailhttps://patchthecve.com/cve/CVE-2024-6024.htmlhttps://patchthecve.com/cve/CVE-2024-6024.htmlWed, 17 Jun 2026 08:17:08 +0000HIGH 8.8: The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when deleting groups or emails, which could allow attackers to make a logged in admin remove them via a CSRF attackCVE-2024-6023: The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when adding emails, which couhttps://patchthecve.com/cve/CVE-2024-6023.htmlhttps://patchthecve.com/cve/CVE-2024-6023.htmlWed, 17 Jun 2026 08:17:07 +0000HIGH 8.8: The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when adding emails, which could allow attackers to make a logged in admin perform such action via a CSRF attackCVE-2024-6022: The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when updating its settings, whttps://patchthecve.com/cve/CVE-2024-6022.htmlhttps://patchthecve.com/cve/CVE-2024-6022.htmlWed, 17 Jun 2026 08:17:07 +0000HIGH 8.8: The ContentLock WordPress plugin through 1.0.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack