https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-10294.htmlhttps://patchthecve.com/cve/CVE-2024-10294.htmlWed, 17 Jun 2026 06:55:21 +0000MEDIUM 6.5: The CE21 Suite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ce21_single_sign_on_save_api_settings' function in versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to change plugin settings.https://patchthecve.com/cve/CVE-2024-10285.htmlhttps://patchthecve.com/cve/CVE-2024-10285.htmlWed, 17 Jun 2026 06:55:20 +0000CRITICAL 9.8: The CE21 Suite plugin for WordPress is vulnerable to sensitive information disclosure via the plugin-log.txt in versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to log in the user associated with the JWT token.https://patchthecve.com/cve/CVE-2024-10284.htmlhttps://patchthecve.com/cve/CVE-2024-10284.htmlWed, 17 Jun 2026 06:55:20 +0000CRITICAL 9.8: The CE21 Suite plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.2.0. This is due to hardcoded encryption key in the 'ce21_authentication_phrase' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, s