https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-5902.htmlhttps://patchthecve.com/cve/CVE-2024-5902.htmlWed, 17 Jun 2026 08:16:52 +0000HIGH 7.2: The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the name parameter in all versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it poshttps://patchthecve.com/cve/CVE-2024-0903.htmlhttps://patchthecve.com/cve/CVE-2024-0903.htmlWed, 17 Jun 2026 06:54:32 +0000MEDIUM 5.4: The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page_submitted' 'link' value in all versions up to, and including, 1.0.13 due to insufficient input sanitization and output escaping. Thhttps://patchthecve.com/cve/CVE-2023-32291.htmlhttps://patchthecve.com/cve/CVE-2023-32291.htmlWed, 17 Jun 2026 05:58:30 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MonsterInsights Pro allows Stored XSS.This issue affects MonsterInsights Pro: from n/a through 8.14.1.https://patchthecve.com/cve/CVE-2023-46153.htmlhttps://patchthecve.com/cve/CVE-2023-46153.htmlWed, 17 Jun 2026 06:30:15 +0000HIGH 7.1: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in UserFeedback Team User Feedback plugin <= 1.0.9 versions.https://patchthecve.com/cve/CVE-2023-39308.htmlhttps://patchthecve.com/cve/CVE-2023-39308.htmlWed, 17 Jun 2026 06:12:00 +0000HIGH 7.1: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in UserFeedback Team User Feedback plugin <= 1.0.7 versions.https://patchthecve.com/cve/CVE-2023-23880.htmlhttps://patchthecve.com/cve/CVE-2023-23880.htmlWed, 17 Jun 2026 05:38:11 +0000MEDIUM 6.5: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExactMetrics plugin <= 7.14.1 versions.