https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-31075.htmlhttps://patchthecve.com/cve/CVE-2023-31075.htmlWed, 17 Jun 2026 05:56:13 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8.https://patchthecve.com/cve/CVE-2023-32505.htmlhttps://patchthecve.com/cve/CVE-2023-32505.htmlWed, 17 Jun 2026 05:58:59 +0000MEDIUM 5.9: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Arshid Easy Hide Login plugin <= 1.0.7 versions.https://patchthecve.com/cve/CVE-2022-4303.htmlhttps://patchthecve.com/cve/CVE-2022-4303.htmlWed, 17 Jun 2026 05:20:32 +0000HIGH 7.5: The WP Limit Login Attempts WordPress plugin through 2.6.4 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based restrictions on login forms.https://patchthecve.com/cve/CVE-2022-3634.htmlhttps://patchthecve.com/cve/CVE-2022-3634.htmlWed, 17 Jun 2026 04:59:55 +0000CRITICAL 9.8: The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV file, which could lead to CSV injection