https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5530.htmlhttps://patchthecve.com/cve/CVE-2025-5530.htmlWed, 17 Jun 2026 09:48:06 +0000MEDIUM 6.4: The WPC Smart Compare for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shortcode_btn' shortcode in all versions up to, and including, 6.4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possiblhttps://patchthecve.com/cve/CVE-2024-43312.htmlhttps://patchthecve.com/cve/CVE-2024-43312.htmlWed, 17 Jun 2026 07:50:47 +0000MEDIUM 5.4: Missing Authorization vulnerability in WPClever WPC Frequently Bought Together for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPC Frequently Bought Together for WooCommerce: from n/a through 7.1.9.https://patchthecve.com/cve/CVE-2024-50416.htmlhttps://patchthecve.com/cve/CVE-2024-50416.htmlWed, 17 Jun 2026 08:04:24 +0000HIGH 8.8: Deserialization of Untrusted Data vulnerability in WPClever WPC Shop as a Customer for WooCommerce wpc-shop-as-customer allows Object Injection.This issue affects WPC Shop as a Customer for WooCommerce: from n/a through <= 1.2.6.https://patchthecve.com/cve/CVE-2024-30537.htmlhttps://patchthecve.com/cve/CVE-2024-30537.htmlWed, 17 Jun 2026 07:27:08 +0000MEDIUM 4.3: Missing Authorization vulnerability in WPClever WPC Badge Management for WooCommerce.This issue affects WPC Badge Management for WooCommerce: from n/a through 2.4.0.https://patchthecve.com/cve/CVE-2023-6494.htmlhttps://patchthecve.com/cve/CVE-2023-6494.htmlWed, 17 Jun 2026 06:50:51 +0000MEDIUM 4.4: The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator