https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-6363.htmlhttps://patchthecve.com/cve/CVE-2024-6363.htmlWed, 17 Jun 2026 08:17:51 +0000MEDIUM 6.4: The Stock Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's stock_ticker shortcode in all versions up to, and including, 3.24.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated atthttps://patchthecve.com/cve/CVE-2023-51541.htmlhttps://patchthecve.com/cve/CVE-2023-51541.htmlWed, 17 Jun 2026 06:41:10 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aleksandar Urošević Stock Ticker allows Stored XSS.This issue affects Stock Ticker: from n/a through 3.23.4.https://patchthecve.com/cve/CVE-2022-45365.htmlhttps://patchthecve.com/cve/CVE-2022-45365.htmlWed, 17 Jun 2026 05:09:52 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aleksandar Urošević Stock Ticker allows Reflected XSS.This issue affects Stock Ticker: from n/a through 3.23.2.https://patchthecve.com/cve/CVE-2023-25987.htmlhttps://patchthecve.com/cve/CVE-2023-25987.htmlWed, 17 Jun 2026 05:42:25 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Aleksandar Urošević My YouTube Channel plugin <= 3.23.3 versions.https://patchthecve.com/cve/CVE-2023-40208.htmlhttps://patchthecve.com/cve/CVE-2023-40208.htmlWed, 17 Jun 2026 06:16:43 +0000HIGH 7.1: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Aleksandar Urošević Stock Ticker plugin <= 3.23.3 versions.