https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-8991.htmlhttps://patchthecve.com/cve/CVE-2024-8991.htmlWed, 17 Jun 2026 08:23:44 +0000MEDIUM 6.4: The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's osm_map and osm_map_v3 shortcodes in all versions up to, and including, 6.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for https://patchthecve.com/cve/CVE-2024-3604.htmlhttps://patchthecve.com/cve/CVE-2024-3604.htmlWed, 17 Jun 2026 07:44:36 +0000CRITICAL 9.9: The OSM – OpenStreetMap plugin for WordPress is vulnerable to SQL Injection via the 'tagged_filter' attribute of the 'osm_map_v3' shortcode in all versions up to, and including, 6.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL qhttps://patchthecve.com/cve/CVE-2024-3603.htmlhttps://patchthecve.com/cve/CVE-2024-3603.htmlWed, 17 Jun 2026 07:44:36 +0000MEDIUM 6.4: The OSM – OpenStreetMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'osm_map' shortcode in all versions up to, and including, 6.0.3 due to insufficient input sanitization and output escaping on user supplied attributes such as 'theme'. This makes it possible fo