https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-4756.htmlhttps://patchthecve.com/cve/CVE-2022-4756.htmlWed, 17 Jun 2026 05:21:45 +0000MEDIUM 5.4: The My YouTube Channel WordPress plugin before 3.23.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privihttps://patchthecve.com/cve/CVE-2023-0447.htmlhttps://patchthecve.com/cve/CVE-2023-0447.htmlWed, 17 Jun 2026 05:25:34 +0000MEDIUM 4.3: The My YouTube Channel plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the clear_all_cache function in versions up to, and including, 3.0.12.1. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to clear thhttps://patchthecve.com/cve/CVE-2023-0446.htmlhttps://patchthecve.com/cve/CVE-2023-0446.htmlWed, 17 Jun 2026 05:25:34 +0000MEDIUM 5.5: The My YouTube Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in versions up to, and including, 3.0.12.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level per