CVE-2024-51920

CVE-2024-51920 affects Map Store Locator (WordPress plugin) versions 1.2.1 and earlier. Root cause: improper input neutralization during web page generation, enabling DOM-Based XSS. Impact: DOM-based cross-site scripting as described; no exploitation details provided in the sources. Remediation: ...

CVE-2024-51918

CVE-2024-51918 is a DOM-based XSS in WordPress Pay With Stripe (plugin) up to version 1.2.1, caused by improper input neutralization during page generation. The CVSS v3.1 base score is 6.5 (Medium); attack vector is network, require user interaction, and the change in scope. References indicate t...

CVE-2024-51921

CVE-2024-51921 pertains to the WordPress plugin scrollup (Midori) and is described as an input sanitization flaw that enables cross-site scripting. Technical details across connected docs indicate the issue affects scrollup versions up to 1.1 (n/a through 1.1) and is characterized as a Cross-Site...

CVE-2024-51921 WordPress scrollup plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in midori scrollup scrollup allows DOM-Based XSS.This issue affects scrollup: from n/a through = 1.1...

CVE-2024-51927

CVE-2024-51927 is linked to Rig Elements For Elementor (WordPress plugin). Connected sources indicate an authenticated, DOM-based Cross-Site Scripting vulnerability in Rig Elements For Elementor, affecting versions up to 1.0 (auth+ requirement implied). The issue arises from improper input handli...

CVE-2024-51929

CVE-2024-51929 is a DOM-based XSS in the WordPress Icon Widget ( Phil Spectrum Icon Widget ) caused by improper input neutralization during page generation. Affected: Icon Widget

CVE-2024-51928

CVE-2024-51928 is a WordPress plugin vulnerability in Blocks Post Grid (

CVE-2024-51931

CVE-2024-51931 is a DOM-based XSS affecting the WordPress plugin AzonBox (versions up to 1.1.2). The issue arises from improper input neutralization during web-page generation, enabling cross-site scripting via manipulated input in the plugin. Public references (RH, NVD, CVE listings) describe th...

CVE-2024-51932 WordPress Kings Tab Slider plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saif Bin-Alam Kings Tab Slider allows DOM-Based XSS.This issue affects Kings Tab Slider: from n/a through 1.0...

CVE-2024-51935 WordPress Fast Video and Image Display plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Perrow Fast Video and Image Display fast-video-and-image-display allows DOM-Based XSS.This issue affects Fast Video and Image Display: from n/a through = 2.5.2...

CVE-2024-51937 WordPress IA Map Analytics Basic plugin <= 20170413 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bnisia IA Map Analytics Basic ia-map-analytics-basic allows DOM-Based XSS.This issue affects IA Map Analytics Basic: from n/a through = 20170413...

CVE-2024-51911: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ketan Patel Featured product by category name featured-product-by-category-name allows DOM-Based XSS.This issue affects Featured product by category name: from n/a through = 1.1...

CVE-2024-51893: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FixoLab Postify: Post Layout For Elementor postify-for-elementor allows DOM-Based XSS.This issue affects Postify: Post Layout For Elementor: from n/a through = 1.0.1...

CVE-2024-51856: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ibllex Moose Elementor Kit moose-elementor-kit allows DOM-Based XSS.This issue affects Moose Elementor Kit: from n/a through = 1.0.0...

CVE-2024-51838: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smajda Pull This pull-this allows DOM-Based XSS.This issue affects Pull This: from n/a through = 1.1...

PT-2024-35012

Name of the Vulnerable Software and Affected Versions Be Shortcodes versions 1.0.0 and earlier Description The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows DOM-Based XSS. This is a high-severity vulnerabilit...

CVE-2024-51916: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Brahma Multifox Plus multifox-plus allows DOM-Based XSS.This issue affects Multifox Plus: from n/a through = 1.1.6...

CVE-2024-51881: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Beautimour Be Shortcodes be-shortcodes allows DOM-Based XSS.This issue affects Be Shortcodes: from n/a through = 1.0.0...

CVE-2024-51823: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SherkSpear Add Ribbon Shortcode add-ribbon allows DOM-Based XSS.This issue affects Add Ribbon Shortcode: from n/a through = 1.0.1...

CVE-2024-51799: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vadim Bogaiskov Bg Patriarchia BU bg-patriarchia-bu allows DOM-Based XSS.This issue affects Bg Patriarchia BU: from n/a through = 2.2.3...