<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: mansurahamed</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-51626: Improper Neutralization of Special Elements used in an SQL Command (&#x27;SQL Injection&#x27;) vulnerability in chenyenm</title><link>https://patchthecve.com/cve/CVE-2024-51626.html</link><guid>https://patchthecve.com/cve/CVE-2024-51626.html</guid><pubDate>Wed, 17 Jun 2026 08:06:02 +0000</pubDate><description>HIGH 8.5: Improper Neutralization of Special Elements used in an SQL Command (&#x27;SQL Injection&#x27;) vulnerability in chenyenming Woocommerce Quote Calculator woo-quote-calculator-order allows Blind SQL Injection.This issue affects Woocommerce Quote Calculator: from n/a through &lt;= 1.1.</description></item><item><title>CVE-2024-50479: Improper Neutralization of Special Elements used in an SQL Command (&#x27;SQL Injection&#x27;) vulnerability in chenyenm</title><link>https://patchthecve.com/cve/CVE-2024-50479.html</link><guid>https://patchthecve.com/cve/CVE-2024-50479.html</guid><pubDate>Wed, 17 Jun 2026 08:04:33 +0000</pubDate><description>CRITICAL 9.3: Improper Neutralization of Special Elements used in an SQL Command (&#x27;SQL Injection&#x27;) vulnerability in chenyenming Woocommerce Quote Calculator woo-quote-calculator-order allows Blind SQL Injection.This issue affects Woocommerce Quote Calculator: from n/a through &lt;= 1.1.</description></item><item><title>CVE-2024-6722: The Chatbot Support AI: Free ChatGPT Chatbot, Woocommerce Chatbot WordPress plugin through 1.0.2 does not sani</title><link>https://patchthecve.com/cve/CVE-2024-6722.html</link><guid>https://patchthecve.com/cve/CVE-2024-6722.html</guid><pubDate>Wed, 17 Jun 2026 08:18:33 +0000</pubDate><description>MEDIUM 4.8: The Chatbot Support AI: Free ChatGPT Chatbot, Woocommerce Chatbot WordPress plugin through 1.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallow</description></item></channel></rss>