https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-24546.htmlhttps://patchthecve.com/cve/CVE-2025-24546.htmlWed, 17 Jun 2026 08:59:12 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in RSTheme Ultimate Coming Soon & Maintenance ultimate-coming-soon allows Cross Site Request Forgery.This issue affects Ultimate Coming Soon & Maintenance: from n/a through <= 1.0.9.https://patchthecve.com/cve/CVE-2025-24543.htmlhttps://patchthecve.com/cve/CVE-2025-24543.htmlWed, 17 Jun 2026 08:59:12 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in RSTheme Ultimate Coming Soon & Maintenance ultimate-coming-soon allows Cross Site Request Forgery.This issue affects Ultimate Coming Soon & Maintenance: from n/a through <= 1.0.9.https://patchthecve.com/cve/CVE-2024-9706.htmlhttps://patchthecve.com/cve/CVE-2024-9706.htmlWed, 17 Jun 2026 08:25:05 +0000MEDIUM 5.3: The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ucsm_activate_lite_template_lite function in all versions up to, and including, 1.0.9. This makes it possible for unauthenticated attackers to changhttps://patchthecve.com/cve/CVE-2024-9705.htmlhttps://patchthecve.com/cve/CVE-2024-9705.htmlWed, 17 Jun 2026 08:25:05 +0000MEDIUM 4.3: The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ucsm_update_template_name_lite' function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with Subs