https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-0970.htmlhttps://patchthecve.com/cve/CVE-2024-0970.htmlWed, 17 Jun 2026 06:54:40 +0000MEDIUM 5.3: This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value.https://patchthecve.com/cve/CVE-2025-1624.htmlhttps://patchthecve.com/cve/CVE-2025-1624.htmlWed, 17 Jun 2026 08:39:29 +0000LOW 3.5: The GDPR Cookie Compliance WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).https://patchthecve.com/cve/CVE-2025-1623.htmlhttps://patchthecve.com/cve/CVE-2025-1623.htmlWed, 17 Jun 2026 08:39:29 +0000LOW 3.5: The GDPR Cookie Compliance WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).https://patchthecve.com/cve/CVE-2025-1622.htmlhttps://patchthecve.com/cve/CVE-2025-1622.htmlWed, 17 Jun 2026 08:39:29 +0000LOW 3.5: The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).https://patchthecve.com/cve/CVE-2025-1621.htmlhttps://patchthecve.com/cve/CVE-2025-1621.htmlWed, 17 Jun 2026 08:39:28 +0000MEDIUM 4.8: The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).https://patchthecve.com/cve/CVE-2025-1620.htmlhttps://patchthecve.com/cve/CVE-2025-1620.htmlWed, 17 Jun 2026 08:39:28 +0000MEDIUM 4.8: The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).https://patchthecve.com/cve/CVE-2025-1619.htmlhttps://patchthecve.com/cve/CVE-2025-1619.htmlWed, 17 Jun 2026 08:39:28 +0000MEDIUM 4.8: The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).https://patchthecve.com/cve/CVE-2025-2205.htmlhttps://patchthecve.com/cve/CVE-2025-2205.htmlWed, 17 Jun 2026 09:06:31 +0000MEDIUM 4.4: The GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice – CCPA, DSGVO, RGPD plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.15.6 due to insufficient input sanitization and output escaping. This makes it po