https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-13773.htmlhttps://patchthecve.com/cve/CVE-2024-13773.htmlWed, 17 Jun 2026 07:02:41 +0000HIGH 7.3: The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via hard-coded credentials. This makes it possible for unauthenticated attackers to extract sensitive data including LinkedIn https://patchthecve.com/cve/CVE-2024-13772.htmlhttps://patchthecve.com/cve/CVE-2024-13772.htmlWed, 17 Jun 2026 07:02:41 +0000MEDIUM 5.6: The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.1.6.1. This is due to a lack of password randomization and user validation through the fb_ajax_login_or_register and google_ajax_login_or_rhttps://patchthecve.com/cve/CVE-2024-13771.htmlhttps://patchthecve.com/cve/CVE-2024-13771.htmlWed, 17 Jun 2026 07:02:41 +0000CRITICAL 9.8: The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.1.4. This is due to a lack of user validation before changing a password. This makes it possible for unauthenticated attackers to change thhttps://patchthecve.com/cve/CVE-2024-12876.htmlhttps://patchthecve.com/cve/CVE-2024-12876.htmlWed, 17 Jun 2026 07:00:40 +0000CRITICAL 9.8: The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.10. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for u