https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-10362.htmlhttps://patchthecve.com/cve/CVE-2024-10362.htmlWed, 17 Jun 2026 06:55:29 +0000MEDIUM 4.8: The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 2.9.1 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for examphttps://patchthecve.com/cve/CVE-2024-37552.htmlhttps://patchthecve.com/cve/CVE-2024-37552.htmlWed, 17 Jun 2026 07:38:35 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Inisev Social Media & Share Icons allows Stored XSS.This issue affects Social Media & Share Icons: from n/a through 2.9.1.https://patchthecve.com/cve/CVE-2024-2118.htmlhttps://patchthecve.com/cve/CVE-2024-2118.htmlWed, 17 Jun 2026 07:23:45 +0000MEDIUM 5.9: The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 2.8.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for examphttps://patchthecve.com/cve/CVE-2024-0561.htmlhttps://patchthecve.com/cve/CVE-2024-0561.htmlWed, 17 Jun 2026 06:53:46 +0000MEDIUM 5.4: The Ultimate Posts Widget WordPress plugin before 2.3.1 does not validate and escape some of its Widget options before outputting them back in attributes, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is dhttps://patchthecve.com/cve/CVE-2024-0559.htmlhttps://patchthecve.com/cve/CVE-2024-0559.htmlWed, 17 Jun 2026 06:53:46 +0000MEDIUM 6.5: The Enhanced Text Widget WordPress plugin before 1.6.6 does not validate and escape some of its Widget options before outputting them back in attributes, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is di