https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5540.htmlhttps://patchthecve.com/cve/CVE-2025-5540.htmlWed, 17 Jun 2026 09:48:07 +0000MEDIUM 6.4: The Event RSVP and Simple Event Management Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emd_mb_meta' shortcode in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes https://patchthecve.com/cve/CVE-2024-6231.htmlhttps://patchthecve.com/cve/CVE-2024-6231.htmlWed, 17 Jun 2026 08:17:35 +0000MEDIUM 5.9: The Request a Quote WordPress plugin before 2.4.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)https://patchthecve.com/cve/CVE-2024-3268.htmlhttps://patchthecve.com/cve/CVE-2024-3268.htmlWed, 17 Jun 2026 07:43:39 +0000MEDIUM 5.3: The YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the emd_form_builder_lite_submit_form function in all versions up to, and including, 3.3.6. This makes it po