https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-10728.htmlhttps://patchthecve.com/cve/CVE-2024-10728.htmlWed, 17 Jun 2026 06:56:16 +0000HIGH 8.8: The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the 'install_required_plugin_callback' function in all versions up to, and including, 4.1.16. This makes it possiblehttps://patchthecve.com/cve/CVE-2024-50443.htmlhttps://patchthecve.com/cve/CVE-2024-50443.htmlWed, 17 Jun 2026 08:04:29 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPXPO PostX ultimate-post.This issue affects PostX: from n/a through <= 4.1.12.https://patchthecve.com/cve/CVE-2024-4305.htmlhttps://patchthecve.com/cve/CVE-2024-4305.htmlWed, 17 Jun 2026 08:01:38 +0000MEDIUM 6.8: The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.1.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Sitehttps://patchthecve.com/cve/CVE-2024-31246.htmlhttps://patchthecve.com/cve/CVE-2024-31246.htmlWed, 17 Jun 2026 07:28:03 +0000MEDIUM 5.4: Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through <= 3.2.3.https://patchthecve.com/cve/CVE-2024-30542.htmlhttps://patchthecve.com/cve/CVE-2024-30542.htmlWed, 17 Jun 2026 07:27:09 +0000CRITICAL 9.8: Improper Privilege Management vulnerability in Wholesale WholesaleX allows Privilege Escalation.This issue affects WholesaleX: from n/a through 1.3.2.https://patchthecve.com/cve/CVE-2024-3239.htmlhttps://patchthecve.com/cve/CVE-2024-3239.htmlWed, 17 Jun 2026 07:43:35 +0000MEDIUM 5.4: The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.0.2 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Sitehttps://patchthecve.com/cve/CVE-2024-30224.htmlhttps://patchthecve.com/cve/CVE-2024-30224.htmlWed, 17 Jun 2026 07:26:32 +0000CRITICAL 10.0: Deserialization of Untrusted Data vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.2.https://patchthecve.com/cve/CVE-2024-30234.htmlhttps://patchthecve.com/cve/CVE-2024-30234.htmlWed, 17 Jun 2026 07:26:34 +0000MEDIUM 6.5: Missing Authorization vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.1.https://patchthecve.com/cve/CVE-2024-30233.htmlhttps://patchthecve.com/cve/CVE-2024-30233.htmlWed, 17 Jun 2026 07:26:34 +0000MEDIUM 6.5: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.1.