PatchTheCVE: dyadyaleshahttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-6798: The DL Verification WordPress plugin through 1.2 does not sanitise and escape some of its settings, which coulhttps://patchthecve.com/cve/CVE-2024-6798.htmlhttps://patchthecve.com/cve/CVE-2024-6798.htmlWed, 17 Jun 2026 08:18:44 +0000MEDIUM 4.8: The DL Verification WordPress plugin through 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).CVE-2024-6797: The DL Robots.txt WordPress plugin through 1.2 does not sanitise and escape some of its settings, which could https://patchthecve.com/cve/CVE-2024-6797.htmlhttps://patchthecve.com/cve/CVE-2024-6797.htmlWed, 17 Jun 2026 08:18:44 +0000MEDIUM 4.8: The DL Robots.txt WordPress plugin through 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).CVE-2024-6462: The DL Yandex Metrika WordPress plugin through 1.2 does not sanitise and escape some of its settings, which cohttps://patchthecve.com/cve/CVE-2024-6462.htmlhttps://patchthecve.com/cve/CVE-2024-6462.htmlWed, 17 Jun 2026 08:18:03 +0000MEDIUM 4.8: The DL Yandex Metrika WordPress plugin through 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)