https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-24955.htmlhttps://patchthecve.com/cve/CVE-2021-24955.htmlWed, 17 Jun 2026 03:41:11 +0000MEDIUM 6.1: The User Registration, Login Form, User Profile & Membership WordPress plugin before 3.2.3 does not escape the data parameter of the pp_get_forms_by_builder_type AJAX action before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issuehttps://patchthecve.com/cve/CVE-2021-24954.htmlhttps://patchthecve.com/cve/CVE-2021-24954.htmlWed, 17 Jun 2026 03:41:11 +0000MEDIUM 6.1: The User Registration, Login Form, User Profile & Membership WordPress plugin before 3.2.3 does not sanitise and escape the ppress_cc_data parameter before outputting it back in an attribute of an admin dashboard page, leading to a Reflected Cross-Site Scripting issuehttps://patchthecve.com/cve/CVE-2021-24939.htmlhttps://patchthecve.com/cve/CVE-2021-24939.htmlWed, 17 Jun 2026 03:41:09 +0000MEDIUM 6.1: The LoginWP (Formerly Peter's Login Redirect) WordPress plugin before 3.0.0.5 does not sanitise and escape the rul_login_url and rul_logout_url parameter before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting issue