https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2015-10120.htmlhttps://patchthecve.com/cve/CVE-2015-10120.htmlWed, 17 Jun 2026 00:21:33 +0000LOW 3.5: A vulnerability, which was classified as problematic, was found in WDS Multisite Aggregate Plugin up to 1.0.0 on WordPress. Affected is the function update_options of the file includes/WDS_Multisite_Aggregate_Options.php. The manipulation leads to cross site scripting. It is possible to launch the ahttps://patchthecve.com/cve/CVE-2023-1623.htmlhttps://patchthecve.com/cve/CVE-2023-1623.htmlWed, 17 Jun 2026 05:28:23 +0000MEDIUM 6.5: The Custom Post Type UI WordPress plugin before 1.13.5 does not properly check for CSRF when sending the debug information to a user supplied email, which could allow attackers to make a logged in admin send such information to an arbitrary email address via a CSRF attack.https://patchthecve.com/cve/CVE-2015-10013.htmlhttps://patchthecve.com/cve/CVE-2015-10013.htmlWed, 17 Jun 2026 00:21:19 +0000LOW 3.5: A vulnerability was found in WebDevStudios taxonomy-switcher Plugin up to 1.0.3 on WordPress. It has been classified as problematic. Affected is the function taxonomy_switcher_init of the file taxonomy-switcher.php. The manipulation leads to cross site scripting. It is possible to launch the attack