PatchTheCVE: northernbeacheswebsiteshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-24607: Missing Authorization vulnerability in Northern Beaches Websites IdeaPush ideapush allows Exploiting Incorrecthttps://patchthecve.com/cve/CVE-2025-24607.htmlhttps://patchthecve.com/cve/CVE-2025-24607.htmlWed, 17 Jun 2026 08:59:18 +0000MEDIUM 5.8: Missing Authorization vulnerability in Northern Beaches Websites IdeaPush ideapush allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IdeaPush: from n/a through <= 8.71.CVE-2023-48774: Missing Authorization vulnerability in Martin Gibson IdeaPush allows Exploiting Incorrectly Configured Access https://patchthecve.com/cve/CVE-2023-48774.htmlhttps://patchthecve.com/cve/CVE-2023-48774.htmlWed, 17 Jun 2026 06:34:56 +0000MEDIUM 5.4: Missing Authorization vulnerability in Martin Gibson IdeaPush allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IdeaPush: from n/a through n/a.CVE-2024-11844: The IdeaPush plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilihttps://patchthecve.com/cve/CVE-2024-11844.htmlhttps://patchthecve.com/cve/CVE-2024-11844.htmlWed, 17 Jun 2026 06:58:34 +0000MEDIUM 4.3: The IdeaPush plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the idea_push_taxonomy_save_routine function in all versions up to, and including, 8.71. This makes it possible for authenticated attackers, with Subscriber-level access and abovCVE-2024-49275: Cross-Site Request Forgery (CSRF) vulnerability in Northern Beaches Websites IdeaPush ideapush allows Cross Sihttps://patchthecve.com/cve/CVE-2024-49275.htmlhttps://patchthecve.com/cve/CVE-2024-49275.htmlWed, 17 Jun 2026 07:59:37 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Northern Beaches Websites IdeaPush ideapush allows Cross Site Request Forgery.This issue affects IdeaPush: from n/a through <= 8.69.CVE-2024-44041: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Northernhttps://patchthecve.com/cve/CVE-2024-44041.htmlhttps://patchthecve.com/cve/CVE-2024-44041.htmlWed, 17 Jun 2026 07:52:12 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Northern Beaches Websites IdeaPush ideapush allows Stored XSS.This issue affects IdeaPush: from n/a through <= 8.66.CVE-2024-37265: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Mhttps://patchthecve.com/cve/CVE-2024-37265.htmlhttps://patchthecve.com/cve/CVE-2024-37265.htmlWed, 17 Jun 2026 07:38:02 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.60.CVE-2024-37461: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Mhttps://patchthecve.com/cve/CVE-2024-37461.htmlhttps://patchthecve.com/cve/CVE-2024-37461.htmlWed, 17 Jun 2026 07:38:24 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.65.