https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-53802.htmlhttps://patchthecve.com/cve/CVE-2024-53802.htmlWed, 17 Jun 2026 08:09:18 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FuturioWP Futurio Extra futurio-extra allows Stored XSS.This issue affects Futurio Extra: from n/a through <= 2.0.14.https://patchthecve.com/cve/CVE-2024-10695.htmlhttps://patchthecve.com/cve/CVE-2024-10695.htmlWed, 17 Jun 2026 06:56:12 +0000MEDIUM 4.3: The Futurio Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.0.13 via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-levelhttps://patchthecve.com/cve/CVE-2024-50446.htmlhttps://patchthecve.com/cve/CVE-2024-50446.htmlWed, 17 Jun 2026 08:04:29 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FuturioWP Futurio Extra futurio-extra.This issue affects Futurio Extra: from n/a through <= 2.0.11.https://patchthecve.com/cve/CVE-2024-5646.htmlhttps://patchthecve.com/cve/CVE-2024-5646.htmlWed, 17 Jun 2026 08:16:21 +0000MEDIUM 6.4: The Futurio Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘header_size’ attribute within the Advanced Text Block widget in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated a