https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-8621.htmlhttps://patchthecve.com/cve/CVE-2024-8621.htmlWed, 17 Jun 2026 08:22:59 +0000CRITICAL 9.9: The Daily Prayer Time plugin for WordPress is vulnerable to SQL Injection via the 'max_word' attribute of the 'quran_verse' shortcode in all versions up to, and including, 2024.08.26 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL quhttps://patchthecve.com/cve/CVE-2023-47817.htmlhttps://patchthecve.com/cve/CVE-2023-47817.htmlWed, 17 Jun 2026 06:33:20 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mmrs151 Daily Prayer Time plugin <= 2023.10.13 versions.https://patchthecve.com/cve/CVE-2023-27632.htmlhttps://patchthecve.com/cve/CVE-2023-27632.htmlWed, 17 Jun 2026 05:45:37 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in mmrs151 Daily Prayer Time plugin <= 2023.03.08 versions.