https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-37480.htmlhttps://patchthecve.com/cve/CVE-2024-37480.htmlWed, 17 Jun 2026 07:38:26 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Apollo13Themes Apollo13 Framework Extensions apollo13-framework-extensions allows Stored XSS.This issue affects Apollo13 Framework Extensions: from n/a through 1.9.3.https://patchthecve.com/cve/CVE-2024-5504.htmlhttps://patchthecve.com/cve/CVE-2024-5504.htmlWed, 17 Jun 2026 08:16:04 +0000MEDIUM 6.4: The Rife Elementor Extensions & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' attribute within the plugin's Writing Effect Headline widget in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping on user supplihttps://patchthecve.com/cve/CVE-2024-35708.htmlhttps://patchthecve.com/cve/CVE-2024-35708.htmlWed, 17 Jun 2026 07:35:13 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in apollo13themes Rife Free allows Stored XSS.This issue affects Rife Free: from n/a through 2.4.19.