https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-10149.htmlhttps://patchthecve.com/cve/CVE-2024-10149.htmlWed, 17 Jun 2026 06:55:01 +0000MEDIUM 4.8: The Social Slider Feed WordPress plugin before 2.2.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).https://patchthecve.com/cve/CVE-2024-13338.htmlhttps://patchthecve.com/cve/CVE-2024-13338.htmlWed, 17 Jun 2026 07:01:48 +0000MEDIUM 5.3: The Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.1. This is due to missing or incorrect nonce validation on the wclearfy_cache_delete functionality . This makes ihttps://patchthecve.com/cve/CVE-2024-13337.htmlhttps://patchthecve.com/cve/CVE-2024-13337.htmlWed, 17 Jun 2026 07:01:48 +0000MEDIUM 4.3: The Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.2. This is due to missing or incorrect nonce validation on the 'setup-wbcr_clearfy' page. This makes it possible https://patchthecve.com/cve/CVE-2025-0717.htmlhttps://patchthecve.com/cve/CVE-2025-0717.htmlWed, 17 Jun 2026 08:27:01 +0000LOW 3.5: To exploit the vulnerability, it is necessary:https://patchthecve.com/cve/CVE-2024-35751.htmlhttps://patchthecve.com/cve/CVE-2024-35751.htmlWed, 17 Jun 2026 07:35:18 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Creative Motion, Will Bontrager Software, LLC Woody ad snippets allows Stored XSS.This issue affects Woody ad snippets: from n/a through 2.4.10.