PatchTheCVE: flickrrss projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-6469: A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allowshttps://patchthecve.com/cve/CVE-2018-6469.htmlhttps://patchthecve.com/cve/CVE-2018-6469.htmlWed, 17 Jun 2026 02:01:52 +0000MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSS_tags parameter to wp-admin/options-general.php.CVE-2018-6468: A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allowshttps://patchthecve.com/cve/CVE-2018-6468.htmlhttps://patchthecve.com/cve/CVE-2018-6468.htmlWed, 17 Jun 2026 02:01:52 +0000MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSS_id parameter to wp-admin/options-general.php.CVE-2018-6467: The flickrRSS plugin 5.3.1 for WordPress has CSRF via wp-admin/options-general.php.https://patchthecve.com/cve/CVE-2018-6467.htmlhttps://patchthecve.com/cve/CVE-2018-6467.htmlWed, 17 Jun 2026 02:01:52 +0000HIGH 8.8: The flickrRSS plugin 5.3.1 for WordPress has CSRF via wp-admin/options-general.php.CVE-2018-6466: A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allowshttps://patchthecve.com/cve/CVE-2018-6466.htmlhttps://patchthecve.com/cve/CVE-2018-6466.htmlWed, 17 Jun 2026 02:01:52 +0000MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSS_set parameter to wp-admin/options-general.php.