https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-7231.htmlhttps://patchthecve.com/cve/CVE-2023-7231.htmlWed, 17 Jun 2026 06:52:22 +0000HIGH 7.3: The illi Link Party! WordPress plugin through 1.0 lacks proper access controls, allowing unauthenticated visitors to delete links.https://patchthecve.com/cve/CVE-2023-7230.htmlhttps://patchthecve.com/cve/CVE-2023-7230.htmlWed, 17 Jun 2026 06:52:21 +0000MEDIUM 6.1: The illi Link Party! WordPress plugin through 1.0 does not sanitize and escape some parameters, which could allow users with a role as low as admin to perform Cross-Site Scripting attacks.https://patchthecve.com/cve/CVE-2023-7229.htmlhttps://patchthecve.com/cve/CVE-2023-7229.htmlWed, 17 Jun 2026 06:52:21 +0000MEDIUM 5.5: The illi Link Party! WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.https://patchthecve.com/cve/CVE-2023-7228.htmlhttps://patchthecve.com/cve/CVE-2023-7228.htmlWed, 17 Jun 2026 06:52:21 +0000MEDIUM 6.1: The illi Link Party! WordPress plugin through 1.0 does not sanitise and escape some parameters, which could allow unauthenticated vistors to perform Cross-Site Scripting attacks.