PatchTheCVE: themehorsehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-50436: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerhttps://patchthecve.com/cve/CVE-2024-50436.htmlhttps://patchthecve.com/cve/CVE-2024-50436.htmlWed, 17 Jun 2026 08:04:28 +0000HIGH 7.5: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themehorse Clean Retina clean-retina.This issue affects Clean Retina: from n/a through <= 3.0.6.CVE-2024-50435: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerhttps://patchthecve.com/cve/CVE-2024-50435.htmlhttps://patchthecve.com/cve/CVE-2024-50435.htmlWed, 17 Jun 2026 08:04:28 +0000HIGH 7.5: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themehorse Meta News meta-news.This issue affects Meta News: from n/a through <= 1.1.7.CVE-2024-50434: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerhttps://patchthecve.com/cve/CVE-2024-50434.htmlhttps://patchthecve.com/cve/CVE-2024-50434.htmlWed, 17 Jun 2026 08:04:28 +0000HIGH 7.5: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themehorse NewsCard newscard.This issue affects NewsCard: from n/a through <= 1.3.CVE-2024-49701: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerhttps://patchthecve.com/cve/CVE-2024-49701.htmlhttps://patchthecve.com/cve/CVE-2024-49701.htmlWed, 17 Jun 2026 08:00:18 +0000HIGH 7.5: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themehorse Mags mags.This issue affects Mags: from n/a through <= 1.1.6.CVE-2024-35758: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thttps://patchthecve.com/cve/CVE-2024-35758.htmlhttps://patchthecve.com/cve/CVE-2024-35758.htmlWed, 17 Jun 2026 07:35:19 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Theme Horse Interface allows Stored XSS.This issue affects Interface: from n/a through 3.1.0.CVE-2024-33537: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme Hohttps://patchthecve.com/cve/CVE-2024-33537.htmlhttps://patchthecve.com/cve/CVE-2024-33537.htmlWed, 17 Jun 2026 07:31:56 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme Horse WP Portfolio allows Stored XSS.This issue affects WP Portfolio: from n/a through 2.4.