CVE-2024-8656

🗓️ 13 Sep 2024 03:27:08Reported by WordfenceType

The WPFactory Helper plugin for WordPress is vulnerable to Reflected Cross-Site Scriptin

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-8656	13 Sep 202406:40	–	circl
CNNVD	WordPress plugin WPFactory Helper 跨站脚本漏洞	13 Sep 202400:00	–	cnnvd
Cvelist	CVE-2024-8656 WPFactory Helper <= 1.7.0 - Reflected Cross-Site Scripting	13 Sep 202403:27	–	cvelist
EUVD	EUVD-2024-49329	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8656	13 Sep 202404:15	–	nvd
OSV	CVE-2024-8656	13 Sep 202404:15	–	osv
Patchstack	WordPress WPFactory Helper plugin <= 1.7.0 - Reflected Cross-Site Scripting vulnerability	13 Sep 202405:59	–	patchstack
Patchstack	WordPress WPFactory Helper Plugin <= 1.7.0 is vulnerable to Cross Site Scripting (XSS)	13 Sep 202400:00	–	patchstack
Positive Technologies	PT-2024-39155 · WordPress · Wpfactory Helper	12 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-8656	23 May 202510:33	–	redhatcve

NVD

Vulners

Node

wpfactory wpfactory_helperRange<1.7.1wordpress

[
  {
    "vendor": "algoritmika",
    "product": "WPFactory Helper",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.7.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3150715/wpcodefactory-helper/tags/1.7.1/includes/class-alg-wpcodefactory-helper-site-key-manager.php
plugins	www.plugins.trac.wordpress.org/browser/wpcodefactory-helper/tags/1.7.0/includes/class-alg-wpcodefactory-helper-site-key-manager.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/cb62eefe-9993-43f7-b3ae-de47c0951bee

17 Jun 2026 08:23Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.1

EPSS0.00384

SSVC

CWE-79