https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-12336.htmlhttps://patchthecve.com/cve/CVE-2024-12336.htmlWed, 17 Jun 2026 06:59:31 +0000MEDIUM 6.5: The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'export_all_data' function in all versions up to, and including, 2.5.3. This makes it possible for authenticated attackers, with Subschttps://patchthecve.com/cve/CVE-2024-12321.htmlhttps://patchthecve.com/cve/CVE-2024-12321.htmlWed, 17 Jun 2026 06:59:29 +0000HIGH 7.1: The WC Affiliate WordPress plugin through 2.3.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.https://patchthecve.com/cve/CVE-2024-12334.htmlhttps://patchthecve.com/cve/CVE-2024-12334.htmlWed, 17 Jun 2026 06:59:30 +0000MEDIUM 6.1: The WC Affiliate – A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via any parameter in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackershttps://patchthecve.com/cve/CVE-2024-4371.htmlhttps://patchthecve.com/cve/CVE-2024-4371.htmlWed, 17 Jun 2026 08:01:46 +0000CRITICAL 9.0: The CoDesigner WooCommerce Builder for Elementor – Customize Checkout, Shop, Email, Products & More plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.4.1 via deserialization of untrusted input from the recently_viewed_products cookie. This makes it po