https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-8799.htmlhttps://patchthecve.com/cve/CVE-2024-8799.htmlWed, 17 Jun 2026 08:23:19 +0000MEDIUM 6.1: The Custom Banners plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages thahttps://patchthecve.com/cve/CVE-2024-2337.htmlhttps://patchthecve.com/cve/CVE-2024-2337.htmlWed, 17 Jun 2026 07:24:20 +0000MEDIUM 6.4: The Easy Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'testimonials_grid ' shortcode in all versions up to, and including, 3.9.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authehttps://patchthecve.com/cve/CVE-2023-41797.htmlhttps://patchthecve.com/cve/CVE-2023-41797.htmlWed, 17 Jun 2026 06:22:49 +0000MEDIUM 6.5: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Gold Plugins Locations plugin <= 4.0 versions.