<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: sumo</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-25033: Cross-Site Request Forgery (CSRF) vulnerability in Sumo Social Share Boost plugin &lt;= 4.5 versions.</title><link>https://patchthecve.com/cve/CVE-2023-25033.html</link><guid>https://patchthecve.com/cve/CVE-2023-25033.html</guid><pubDate>Wed, 17 Jun 2026 05:40:32 +0000</pubDate><description>MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in Sumo Social Share Boost plugin &lt;= 4.5 versions.</description></item><item><title>CVE-2023-25044: Auth</title><link>https://patchthecve.com/cve/CVE-2023-25044.html</link><guid>https://patchthecve.com/cve/CVE-2023-25044.html</guid><pubDate>Wed, 17 Jun 2026 05:40:33 +0000</pubDate><description>MEDIUM 5.9: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sumo Social Share Boost plugin &lt;= 4.4 versions.</description></item><item><title>CVE-2023-23688: Auth</title><link>https://patchthecve.com/cve/CVE-2023-23688.html</link><guid>https://patchthecve.com/cve/CVE-2023-23688.html</guid><pubDate>Wed, 17 Jun 2026 05:37:43 +0000</pubDate><description>MEDIUM 6.5: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Sumo Social Share Boost plugin &lt;= 4.4 versions.</description></item><item><title>CVE-2022-4323: The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could </title><link>https://patchthecve.com/cve/CVE-2022-4323.html</link><guid>https://patchthecve.com/cve/CVE-2022-4323.html</guid><pubDate>Wed, 17 Jun 2026 05:20:35 +0000</pubDate><description>HIGH 7.2: The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present</description></item><item><title>CVE-2022-3425: The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could </title><link>https://patchthecve.com/cve/CVE-2022-3425.html</link><guid>https://patchthecve.com/cve/CVE-2022-3425.html</guid><pubDate>Wed, 17 Jun 2026 04:59:30 +0000</pubDate><description>HIGH 7.2: The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.</description></item></channel></rss>