https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-45631.htmlhttps://patchthecve.com/cve/CVE-2023-45631.htmlWed, 17 Jun 2026 06:28:57 +0000MEDIUM 4.3: Missing Authorization vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3.https://patchthecve.com/cve/CVE-2024-10856.htmlhttps://patchthecve.com/cve/CVE-2024-10856.htmlWed, 17 Jun 2026 06:56:34 +0000MEDIUM 6.5: The Booking Calendar WpDevArt plugin is vulnerable to time-based, blind SQL injection via the `id` parameter in the “wpdevart_booking_calendar” shortcode in versions up to, and including, 3.2.19 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the exihttps://patchthecve.com/cve/CVE-2023-24407.htmlhttps://patchthecve.com/cve/CVE-2023-24407.htmlWed, 17 Jun 2026 05:39:09 +0000MEDIUM 5.0: Missing Authorization vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.3.https://patchthecve.com/cve/CVE-2024-7355.htmlhttps://patchthecve.com/cve/CVE-2024-7355.htmlWed, 17 Jun 2026 08:19:55 +0000MEDIUM 4.9: The Organization chart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_input’ and 'node_description' parameter in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, https://patchthecve.com/cve/CVE-2024-37542.htmlhttps://patchthecve.com/cve/CVE-2024-37542.htmlWed, 17 Jun 2026 07:38:34 +0000MEDIUM 5.4: Missing Authorization vulnerability in WpDevArt Responsive Image Gallery, Gallery Album.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3.https://patchthecve.com/cve/CVE-2023-0177.htmlhttps://patchthecve.com/cve/CVE-2023-0177.htmlWed, 28 Oct 2026 19:10:00 +0000MEDIUM 5.4: The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scri