https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-20193.htmlhttps://patchthecve.com/cve/CVE-2017-20193.htmlWed, 17 Jun 2026 01:15:22 +0000MEDIUM 4.7: The Product Vendors is vulnerable to Reflected Cross-Site Scripting via the 'vendor_description' parameter in versions up to, and including, 2.0.35 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pagehttps://patchthecve.com/cve/CVE-2023-52186.htmlhttps://patchthecve.com/cve/CVE-2023-52186.htmlWed, 17 Jun 2026 06:42:15 +0000MEDIUM 5.3: Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.2.https://patchthecve.com/cve/CVE-2023-33331.htmlhttps://patchthecve.com/cve/CVE-2023-33331.htmlWed, 17 Jun 2026 06:01:36 +0000HIGH 8.5: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Product Vendors allows SQL Injection.This issue affects Product Vendors: from n/a through 2.1.76.https://patchthecve.com/cve/CVE-2023-35879.htmlhttps://patchthecve.com/cve/CVE-2023-35879.htmlWed, 17 Jun 2026 06:05:23 +0000HIGH 7.6: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Product Vendors allows SQL Injection.This issue affects Product Vendors: from n/a through 2.1.78.