https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5692.htmlhttps://patchthecve.com/cve/CVE-2025-5692.htmlWed, 17 Jun 2026 09:48:33 +0000MEDIUM 6.3: The Lead Form Data Collection to CRM plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the ~/includes/LB_admin_ajax.php file in all versions up to, and including, 3.1. This makes it possible for authenticated attackers, with Subscribehttps://patchthecve.com/cve/CVE-2024-12315.htmlhttps://patchthecve.com/cve/CVE-2024-12315.htmlWed, 17 Jun 2026 06:59:29 +0000HIGH 7.5: The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.3 via the exports directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the https://patchthecve.com/cve/CVE-2024-9364.htmlhttps://patchthecve.com/cve/CVE-2024-9364.htmlWed, 17 Jun 2026 08:24:25 +0000MEDIUM 4.3: The SendGrid for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'wp_mailplus_clear_logs' function in all versions up to, and including, 1.4. This makes it possible for authenticated attackers, with Subscriber-level access and above,https://patchthecve.com/cve/CVE-2024-43965.htmlhttps://patchthecve.com/cve/CVE-2024-43965.htmlWed, 17 Jun 2026 07:52:04 +0000HIGH 8.2: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smackcoders SendGrid for WordPress allows SQL Injection.This issue affects SendGrid for WordPress: from n/a through 1.4.