PatchTheCVE: wptriohttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-31094: Unauthhttps://patchthecve.com/cve/CVE-2023-31094.htmlhttps://patchthecve.com/cve/CVE-2023-31094.htmlWed, 17 Jun 2026 05:56:16 +0000HIGH 7.1: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce plugin <= 2.4.0 versions.CVE-2022-46805: Cross-Site Request Forgery (CSRF) vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerhttps://patchthecve.com/cve/CVE-2022-46805.htmlhttps://patchthecve.com/cve/CVE-2022-46805.htmlWed, 17 Jun 2026 05:12:25 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin <= 2.3.1 leading to activation/deactivation of plugin rulesets.CVE-2022-46815: Cross-Site Request Forgery (CSRF) vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerhttps://patchthecve.com/cve/CVE-2022-46815.htmlhttps://patchthecve.com/cve/CVE-2022-46815.htmlWed, 17 Jun 2026 05:12:26 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin <= 2.3.1 versions.