https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-5758.htmlhttps://patchthecve.com/cve/CVE-2008-5758.htmlTue, 16 Jun 2026 23:00:56 +0000MEDIUM 6.8: Cross-site request forgery (CSRF) vulnerability in PHParanoid before 0.5 allows remote attackers to perform unspecified actions as authenticated users via unknown vectors related to private messages.https://patchthecve.com/cve/CVE-2008-5673.htmlhttps://patchthecve.com/cve/CVE-2008-5673.htmlTue, 16 Jun 2026 23:00:46 +0000MEDIUM 6.5: PHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated users, which has unknown impact and remote attack vectors.https://patchthecve.com/cve/CVE-2008-5672.htmlhttps://patchthecve.com/cve/CVE-2008-5672.htmlTue, 16 Jun 2026 23:00:46 +0000MEDIUM 6.8: Multiple cross-site request forgery (CSRF) vulnerabilities in PHParanoid before 0.4 allow remote attackers to hijack the authentication of arbitrary users for requests that use (1) admin.php or (2) private messages.