https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-13751.htmlhttps://patchthecve.com/cve/CVE-2024-13751.htmlWed, 17 Jun 2026 07:02:40 +0000MEDIUM 6.4: The 3D Photo Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'des[]' parameter in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and https://patchthecve.com/cve/CVE-2024-13687.htmlhttps://patchthecve.com/cve/CVE-2024-13687.htmlWed, 17 Jun 2026 07:02:32 +0000MEDIUM 4.3: The Team Builder – Meet the Team plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_team_builder_options() function in all versions up to, and including, 1.3. This makes it possible for authenticated attackers, with Subscriber-level https://patchthecve.com/cve/CVE-2024-13582.htmlhttps://patchthecve.com/cve/CVE-2024-13582.htmlWed, 17 Jun 2026 07:02:18 +0000MEDIUM 6.4: The Simple Pricing Tables For WPBakery Page Builder(Formerly Visual Composer) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wdo_simple_pricing_table_free' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escap