PatchTheCVE: eleopardhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2019-17386: The animate-it plugin before 2.3.6 for WordPress has CSRF in edsanimate.php.https://patchthecve.com/cve/CVE-2019-17386.htmlhttps://patchthecve.com/cve/CVE-2019-17386.htmlWed, 17 Jun 2026 02:23:51 +0000HIGH 8.8: The animate-it plugin before 2.3.6 for WordPress has CSRF in edsanimate.php.CVE-2019-17385: The animate-it plugin before 2.3.5 for WordPress has XSS.https://patchthecve.com/cve/CVE-2019-17385.htmlhttps://patchthecve.com/cve/CVE-2019-17385.htmlWed, 17 Jun 2026 02:23:51 +0000MEDIUM 6.1: The animate-it plugin before 2.3.5 for WordPress has XSS.CVE-2019-17384: The animate-it plugin before 2.3.4 for WordPress has XSS.https://patchthecve.com/cve/CVE-2019-17384.htmlhttps://patchthecve.com/cve/CVE-2019-17384.htmlWed, 17 Jun 2026 02:23:51 +0000MEDIUM 6.1: The animate-it plugin before 2.3.4 for WordPress has XSS.