https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-11724.htmlhttps://patchthecve.com/cve/CVE-2024-11724.htmlWed, 17 Jun 2026 06:58:19 +0000MEDIUM 4.3: The Cookie Consent for WP – Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpl_script_save AJAX action in all versions up to, and including, 3.6.5https://patchthecve.com/cve/CVE-2024-10113.htmlhttps://patchthecve.com/cve/CVE-2024-10113.htmlWed, 17 Jun 2026 06:54:56 +0000MEDIUM 6.4: The WP AdCenter – Ad Manager & Adsense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpadcenter_ad shortcode in all versions up to, and including, 2.5.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it posshttps://patchthecve.com/cve/CVE-2024-8317.htmlhttps://patchthecve.com/cve/CVE-2024-8317.htmlWed, 17 Jun 2026 08:22:20 +0000MEDIUM 6.4: The WP AdCenter – Ad Manager & Adsense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ad_alignment’ attribute in all versions up to, and including, 2.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wihttps://patchthecve.com/cve/CVE-2024-4869.htmlhttps://patchthecve.com/cve/CVE-2024-4869.htmlWed, 17 Jun 2026 08:03:04 +0000HIGH 7.2: The WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Client-IP’ header in all versions up to, and including, 3.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackerhttps://patchthecve.com/cve/CVE-2024-3599.htmlhttps://patchthecve.com/cve/CVE-2024-3599.htmlWed, 17 Jun 2026 07:44:36 +0000MEDIUM 5.3: The WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the gdpr_policy_process_delete() function in all versions up to, and including, 3.0.2. This makes it possible for unauthenticated attackers to dele