https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-12468.htmlhttps://patchthecve.com/cve/CVE-2024-12468.htmlWed, 17 Jun 2026 06:59:46 +0000MEDIUM 6.1: The WP Datepicker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpdp_get_selected_datepicker' parameter in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injehttps://patchthecve.com/cve/CVE-2024-47321.htmlhttps://patchthecve.com/cve/CVE-2024-47321.htmlWed, 17 Jun 2026 07:56:52 +0000MEDIUM 6.5: Missing Authorization vulnerability in Fahad Mahmood WP Datepicker wp-datepicker.This issue affects WP Datepicker: from n/a through <= 2.1.1.https://patchthecve.com/cve/CVE-2024-49629.htmlhttps://patchthecve.com/cve/CVE-2024-49629.htmlWed, 17 Jun 2026 08:00:10 +0000HIGH 7.1: Cross-Site Request Forgery (CSRF) vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through <= 2.2.7.https://patchthecve.com/cve/CVE-2024-44042.htmlhttps://patchthecve.com/cve/CVE-2024-44042.htmlWed, 17 Jun 2026 07:52:12 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood WP Datepicker wp-datepicker allows Stored XSS.This issue affects WP Datepicker: from n/a through <= 2.1.1.