https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-6319.htmlhttps://patchthecve.com/cve/CVE-2024-6319.htmlWed, 17 Jun 2026 08:17:46 +0000HIGH 8.8: The IMGspider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload' function in all versions up to, and including, 2.3.10. This makes it possible for authenticated attackers, with contributor-level and above permissions, to upload arbitrary https://patchthecve.com/cve/CVE-2024-6318.htmlhttps://patchthecve.com/cve/CVE-2024-6318.htmlWed, 17 Jun 2026 08:17:46 +0000HIGH 8.8: The IMGspider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_img_file' function in all versions up to, and including, 2.3.10. This makes it possible for authenticated attackers, with contributor-level and above permissions, to upload ahttps://patchthecve.com/cve/CVE-2023-26531.htmlhttps://patchthecve.com/cve/CVE-2023-26531.htmlWed, 17 Jun 2026 05:43:31 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in 闪电博 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 allows Cross Site Request Forgery.This issue affects 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条: from n/a through 4.2.7.