https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2016-10975.htmlhttps://patchthecve.com/cve/CVE-2016-10975.htmlWed, 17 Jun 2026 00:40:44 +0000MEDIUM 6.1: The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter.https://patchthecve.com/cve/CVE-2016-10974.htmlhttps://patchthecve.com/cve/CVE-2016-10974.htmlWed, 17 Jun 2026 00:40:43 +0000HIGH 8.8: The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frs_save CSRF with resultant stored XSS.https://patchthecve.com/cve/CVE-2018-5311.htmlhttps://patchthecve.com/cve/CVE-2018-5311.htmlWed, 17 Jun 2026 02:00:01 +0000MEDIUM 5.4: The Easy Custom Auto Excerpt plugin 2.4.6 for WordPress has XSS via the tonjoo_ecae_options[custom_css] parameter to the wp-admin/admin.php?page=tonjoo_excerpt URI.