PatchTheCVE: arrowpluginshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-46077: Unauthhttps://patchthecve.com/cve/CVE-2023-46077.htmlhttps://patchthecve.com/cve/CVE-2023-46077.htmlWed, 17 Jun 2026 06:29:59 +0000HIGH 7.1: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Arrow Plugins The Awesome Feed – Custom Feed plugin <= 2.2.5 versions.CVE-2023-45003: Unauthhttps://patchthecve.com/cve/CVE-2023-45003.htmlhttps://patchthecve.com/cve/CVE-2023-45003.htmlWed, 17 Jun 2026 06:28:04 +0000HIGH 7.1: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Arrow Plugins Social Feed | Custom Feed for Social Media Networks plugin <= 2.2.0 versions.CVE-2023-44264: Authhttps://patchthecve.com/cve/CVE-2023-44264.htmlhttps://patchthecve.com/cve/CVE-2023-44264.htmlWed, 17 Jun 2026 06:27:15 +0000MEDIUM 6.5: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Arrow Plugins The Awesome Feed – Custom Feed plugin <= 2.2.5 versions.