PatchTheCVE: dineshkarkihttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-47305: Cross-Site Request Forgery (CSRF) vulnerability in Dnesscarkey Use Any Font use-any-font allows Cross Site Reqhttps://patchthecve.com/cve/CVE-2024-47305.htmlhttps://patchthecve.com/cve/CVE-2024-47305.htmlWed, 17 Jun 2026 07:56:50 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Dnesscarkey Use Any Font use-any-font allows Cross Site Request Forgery.This issue affects Use Any Font: from n/a through <= 6.3.08.CVE-2024-43947: Cross-Site Request Forgery (CSRF) vulnerability in Dinesh Karki WP Armour Extended.This issue affects WP Armouhttps://patchthecve.com/cve/CVE-2024-43947.htmlhttps://patchthecve.com/cve/CVE-2024-43947.htmlWed, 17 Jun 2026 07:52:02 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in Dinesh Karki WP Armour Extended.This issue affects WP Armour Extended: from n/a through 1.26.CVE-2024-43948: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dhttps://patchthecve.com/cve/CVE-2024-43948.htmlhttps://patchthecve.com/cve/CVE-2024-43948.htmlWed, 17 Jun 2026 07:52:02 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dinesh Karki WP Armour Extended.This issue affects WP Armour Extended: from n/a through 1.26.CVE-2023-44261: Cross-Site Request Forgery (CSRF) vulnerability in Dinesh Karki Block Plugin Update plugin <= 3.3 versions.https://patchthecve.com/cve/CVE-2023-44261.htmlhttps://patchthecve.com/cve/CVE-2023-44261.htmlWed, 17 Jun 2026 06:27:14 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Dinesh Karki Block Plugin Update plugin <= 3.3 versions.