https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-45460.htmlhttps://patchthecve.com/cve/CVE-2024-45460.htmlWed, 17 Jun 2026 07:54:15 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in manu225 Flipping Cards flipping-cards allows Stored XSS.This issue affects Flipping Cards: from n/a through <= 1.30.https://patchthecve.com/cve/CVE-2024-4602.htmlhttps://patchthecve.com/cve/CVE-2024-4602.htmlWed, 17 Jun 2026 08:02:14 +0000MEDIUM 5.4: The Embed Peertube Playlist WordPress plugin before 1.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)https://patchthecve.com/cve/CVE-2024-3937.htmlhttps://patchthecve.com/cve/CVE-2024-3937.htmlWed, 17 Jun 2026 07:45:30 +0000MEDIUM 4.8: The Playlist for Youtube WordPress plugin through 1.32 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)https://patchthecve.com/cve/CVE-2023-45645.htmlhttps://patchthecve.com/cve/CVE-2023-45645.htmlWed, 17 Jun 2026 06:28:59 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in InfoD74 WP Open Street Map plugin <= 1.25 versions.