https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-0898.htmlhttps://patchthecve.com/cve/CVE-2024-0898.htmlWed, 17 Jun 2026 06:54:31 +0000MEDIUM 4.4: The Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping. This makes https://patchthecve.com/cve/CVE-2023-52226.htmlhttps://patchthecve.com/cve/CVE-2023-52226.htmlWed, 17 Jun 2026 06:42:20 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Advanced Flamingo.This issue affects Advanced Flamingo: from n/a through 1.0.https://patchthecve.com/cve/CVE-2023-48769.htmlhttps://patchthecve.com/cve/CVE-2023-48769.htmlWed, 17 Jun 2026 06:34:55 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Blue Coral Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back.This issue affects Chat Bubble – Floating Chat with Contact Chat Icons, Messages, Telegram, Email, SMS, Call me back: from n/a through 2.3.