https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-4962.htmlhttps://patchthecve.com/cve/CVE-2023-4962.htmlWed, 17 Jun 2026 06:38:59 +0000MEDIUM 6.4: The Video PopUp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'video_popup' shortcode in versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contrihttps://patchthecve.com/cve/CVE-2007-10003.htmlhttps://patchthecve.com/cve/CVE-2007-10003.htmlTue, 16 Jun 2026 22:36:43 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in The Hackers Diet Plugin up to 0.9.6b on WordPress. This issue affects some unknown processing of the file ajax_blurb.php of the component HTTP POST Request Handler. The manipulation of the argument user leads to sql injection. The https://patchthecve.com/cve/CVE-2005-10002.htmlhttps://patchthecve.com/cve/CVE-2005-10002.htmlTue, 16 Jun 2026 22:12:12 +0000MEDIUM 5.5: A vulnerability, which was classified as critical, was found in almosteffortless secure-files Plugin up to 1.1 on WordPress. Affected is the function sf_downloads of the file secure-files.php. The manipulation of the argument downloadfile leads to path traversal. Upgrading to version 1.2 is able to