https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-37122.htmlhttps://patchthecve.com/cve/CVE-2024-37122.htmlWed, 17 Jun 2026 07:37:47 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Biplob Adhikari Accordions allows Stored XSS.This issue affects Accordions: from n/a through 2.3.5.https://patchthecve.com/cve/CVE-2024-37121.htmlhttps://patchthecve.com/cve/CVE-2024-37121.htmlWed, 17 Jun 2026 07:37:47 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in biplob018 Shortcode Addons allows Stored XSS.This issue affects Shortcode Addons: from n/a through 3.2.5.https://patchthecve.com/cve/CVE-2024-37120.htmlhttps://patchthecve.com/cve/CVE-2024-37120.htmlWed, 17 Jun 2026 07:37:47 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Biplob Adhikari Tabs allows Stored XSS.This issue affects Tabs: from n/a through 4.0.6.https://patchthecve.com/cve/CVE-2024-37546.htmlhttps://patchthecve.com/cve/CVE-2024-37546.htmlWed, 17 Jun 2026 07:38:35 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in biplob018 Image Hover Effects - Caption Hover with Carousel allows Stored XSS.This issue affects Image Hover Effects - Caption Hover with Carousel: from n/a through 3.0.2.https://patchthecve.com/cve/CVE-2024-5001.htmlhttps://patchthecve.com/cve/CVE-2024-5001.htmlWed, 17 Jun 2026 08:14:52 +0000MEDIUM 6.4: The Image Hover Effects for Elementor with Lightbox and Flipbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_id', 'oxi_addons_f_title_tag', and 'content_description_tag' parameters in all versions up to, and including, 3.0.2 due to insufficient input sanitization and o