https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-7692.htmlhttps://patchthecve.com/cve/CVE-2024-7692.htmlWed, 17 Jun 2026 08:20:43 +0000MEDIUM 6.1: The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.https://patchthecve.com/cve/CVE-2024-7691.htmlhttps://patchthecve.com/cve/CVE-2024-7691.htmlWed, 17 Jun 2026 08:20:43 +0000MEDIUM 6.1: The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks against administrators.https://patchthecve.com/cve/CVE-2024-3966.htmlhttps://patchthecve.com/cve/CVE-2024-3966.htmlWed, 17 Jun 2026 07:45:34 +0000MEDIUM 6.1: The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripting attacks that trigger when an admin visits the Prayer Requests in the WP Adminhttps://patchthecve.com/cve/CVE-2024-3965.htmlhttps://patchthecve.com/cve/CVE-2024-3965.htmlWed, 17 Jun 2026 07:45:33 +0000MEDIUM 5.4: The Pray For Me WordPress plugin through 1.0.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack