https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-1064.htmlhttps://patchthecve.com/cve/CVE-2025-1064.htmlWed, 17 Jun 2026 08:38:19 +0000MEDIUM 6.4: The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's xoo_el_action shortcode in all versions up to, and including, 2.8.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makhttps://patchthecve.com/cve/CVE-2024-8724.htmlhttps://patchthecve.com/cve/CVE-2024-8724.htmlWed, 17 Jun 2026 08:23:11 +0000MEDIUM 6.1: The Waitlist Woocommerce ( Back in stock notifier ) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.7.5. This makes it possible for unauthenticated attackers to injecthttps://patchthecve.com/cve/CVE-2024-5665.htmlhttps://patchthecve.com/cve/CVE-2024-5665.htmlWed, 17 Jun 2026 08:16:23 +0000MEDIUM 4.3: The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ‘export_settings’ function in versions 2.7.1 to 2.7.2. This makes it possible for authenticated attackers, with Subscriber-level access and https://patchthecve.com/cve/CVE-2024-5324.htmlhttps://patchthecve.com/cve/CVE-2024-5324.htmlWed, 17 Jun 2026 08:15:41 +0000HIGH 8.8: Multiple plugins for WordPress utilizing the XootiX Framework are vulnerable to unauthorized modification of data due to a missing capability check on the 'import_settings' function in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to ch