PatchTheCVE: invite anyone projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2017-18545: The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-ehttps://patchthecve.com/cve/CVE-2017-18545.htmlhttps://patchthecve.com/cve/CVE-2017-18545.htmlWed, 17 Jun 2026 01:13:04 +0000HIGH 7.5: The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input.CVE-2017-18544: The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF.https://patchthecve.com/cve/CVE-2017-18544.htmlhttps://patchthecve.com/cve/CVE-2017-18544.htmlWed, 17 Jun 2026 01:13:04 +0000HIGH 8.8: The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF.CVE-2017-18543: The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations.https://patchthecve.com/cve/CVE-2017-18543.htmlhttps://patchthecve.com/cve/CVE-2017-18543.htmlWed, 17 Jun 2026 01:13:04 +0000CRITICAL 9.8: The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations.