https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-1570.htmlhttps://patchthecve.com/cve/CVE-2025-1570.htmlWed, 17 Jun 2026 08:39:23 +0000HIGH 8.1: The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 8.1. This is due to the directorist_generate_password_reset_pin_code() and reset_user_password() fuhttps://patchthecve.com/cve/CVE-2024-12041.htmlhttps://patchthecve.com/cve/CVE-2024-12041.htmlWed, 17 Jun 2026 06:58:56 +0000MEDIUM 5.3: The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12 via the /wp-json/directorist/v1/users/ endpoint. This makes it possible for unauthenticated attackers thttps://patchthecve.com/cve/CVE-2025-24782.htmlhttps://patchthecve.com/cve/CVE-2025-24782.htmlWed, 17 Jun 2026 08:59:35 +0000MEDIUM 6.5: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpWax Post Grid, Slider & Carousel Ultimate post-grid-carousel-ultimate allows PHP Local File Inclusion.This issue affects Post Grid, Slider & Carousel Ultimate: from n/a through https://patchthecve.com/cve/CVE-2024-13409.htmlhttps://patchthecve.com/cve/CVE-2024-13409.htmlWed, 17 Jun 2026 07:01:57 +0000HIGH 7.5: The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.10 via the 'theme' parameter of the post_type_ajax_handler() function. This makes it possible for authenhttps://patchthecve.com/cve/CVE-2024-29925.htmlhttps://patchthecve.com/cve/CVE-2024-29925.htmlWed, 17 Jun 2026 07:23:22 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Post Grid, Slider & Carousel Ultimate allows Stored XSS.This issue affects Post Grid, Slider & Carousel Ultimate: from n/a through 1.6.6.