https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-9990.htmlhttps://patchthecve.com/cve/CVE-2024-9990.htmlWed, 17 Jun 2026 08:25:39 +0000HIGH 8.8: The Crypto plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.15. This is due to missing nonce validation in the 'crypto_connect_ajax_process::check' function. This makes it possible for unauthenticated attackers to log in as any existing user on thehttps://patchthecve.com/cve/CVE-2024-9989.htmlhttps://patchthecve.com/cve/CVE-2024-9989.htmlWed, 17 Jun 2026 08:25:39 +0000CRITICAL 9.8: The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.18. This is due to a limited arbitrary method call to 'crypto_connect_ajax_process::log_in' function in the 'crypto_connect_ajax_process' function. This makes it possible for unauthenticated athttps://patchthecve.com/cve/CVE-2024-9988.htmlhttps://patchthecve.com/cve/CVE-2024-9988.htmlWed, 17 Jun 2026 08:25:39 +0000CRITICAL 9.8: The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.19. This is due to missing validation on the user being supplied in the 'crypto_connect_ajax_process::register' function. This makes it possible for unauthenticated attackers to log in as any e