PatchTheCVE: nextcodehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-29439: Cross-Site Request Forgery (CSRF) vulnerability in Image Slider by NextCode plugin <= 1.1.2 at WordPress allowhttps://patchthecve.com/cve/CVE-2022-29439.htmlhttps://patchthecve.com/cve/CVE-2022-29439.htmlWed, 17 Jun 2026 04:40:11 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in Image Slider by NextCode plugin <= 1.1.2 at WordPress allows deleting slides.CVE-2022-29438: Authenticated (author or higher user role) Persistent Cross-Site Scripting (XSS) vulnerability in Image Sliderhttps://patchthecve.com/cve/CVE-2022-29438.htmlhttps://patchthecve.com/cve/CVE-2022-29438.htmlWed, 17 Jun 2026 04:40:11 +0000MEDIUM 4.8: Authenticated (author or higher user role) Persistent Cross-Site Scripting (XSS) vulnerability in Image Slider by NextCode plugin <= 1.1.2 at WordPress.CVE-2022-29437: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Image Slider by NextCode plugin <= 1.1.2 at Wordhttps://patchthecve.com/cve/CVE-2022-29437.htmlhttps://patchthecve.com/cve/CVE-2022-29437.htmlWed, 17 Jun 2026 04:40:11 +0000MEDIUM 5.4: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Image Slider by NextCode plugin <= 1.1.2 at WordPress.