CVE-2024-51918

CVE-2024-51918 is a DOM-based XSS in WordPress Pay With Stripe (plugin) up to version 1.2.1, caused by improper input neutralization during page generation. The CVSS v3.1 base score is 6.5 (Medium); attack vector is network, require user interaction, and the change in scope. References indicate t...

CVE-2024-51920

CVE-2024-51920 affects Map Store Locator (WordPress plugin) versions 1.2.1 and earlier. Root cause: improper input neutralization during web page generation, enabling DOM-Based XSS. Impact: DOM-based cross-site scripting as described; no exploitation details provided in the sources. Remediation: ...

CVE-2024-51921 WordPress scrollup plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in midori scrollup scrollup allows DOM-Based XSS.This issue affects scrollup: from n/a through = 1.1...

CVE-2024-51921

CVE-2024-51921 pertains to the WordPress plugin scrollup (Midori) and is described as an input sanitization flaw that enables cross-site scripting. Technical details across connected docs indicate the issue affects scrollup versions up to 1.1 (n/a through 1.1) and is characterized as a Cross-Site...

CVE-2024-51927

CVE-2024-51927 is linked to Rig Elements For Elementor (WordPress plugin). Connected sources indicate an authenticated, DOM-based Cross-Site Scripting vulnerability in Rig Elements For Elementor, affecting versions up to 1.0 (auth+ requirement implied). The issue arises from improper input handli...

CVE-2024-51929

CVE-2024-51929 is a DOM-based XSS in the WordPress Icon Widget ( Phil Spectrum Icon Widget ) caused by improper input neutralization during page generation. Affected: Icon Widget

CVE-2024-51928

CVE-2024-51928 is a WordPress plugin vulnerability in Blocks Post Grid (

CVE-2024-51931

CVE-2024-51931 is a DOM-based XSS affecting the WordPress plugin AzonBox (versions up to 1.1.2). The issue arises from improper input neutralization during web-page generation, enabling cross-site scripting via manipulated input in the plugin. Public references (RH, NVD, CVE listings) describe th...

CVE-2024-51932 WordPress Kings Tab Slider plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saif Bin-Alam Kings Tab Slider allows DOM-Based XSS.This issue affects Kings Tab Slider: from n/a through 1.0...

CVE-2024-51935 WordPress Fast Video and Image Display plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Perrow Fast Video and Image Display fast-video-and-image-display allows DOM-Based XSS.This issue affects Fast Video and Image Display: from n/a through = 2.5.2...

CVE-2024-51937 WordPress IA Map Analytics Basic plugin <= 20170413 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bnisia IA Map Analytics Basic ia-map-analytics-basic allows DOM-Based XSS.This issue affects IA Map Analytics Basic: from n/a through = 20170413...

PT-2024-34969 · Elementor · File Select Control For Elementor

Name of the Vulnerable Software and Affected Versions: File Select Control For Elementor versions 1.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject...

PT-2024-34334 · Wm Zoom · Wm Zoom

Name of the Vulnerable Software and Affected Versions: WM Zoom versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. Specifically, it is a DOM-Based XSS vulnerability. This means that the...

PT-2024-34320 · Unknown · Rlm Elementor Widgets Pack

Name of the Vulnerable Software and Affected Versions: RLM Elementor Widgets Pack versions 1.3.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This can lead to cross-site scripting attacks...

PT-2024-35011 · Unknown · Bebetter Social Icons

Name of the Vulnerable Software and Affected Versions: BeBetter Social Icons versions through 2.7 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This can lead to the execution of malicious scripts in the context of...

PT-2024-34981 · Elementor · Dynamic Post Grid Elementor Addon

Name of the Vulnerable Software and Affected Versions: Dynamic Post Grid Elementor Addon versions 1.0.0 through 1.0.6 Description: The issue affects the Dynamic Post Grid Elementor Addon, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This is a...

PT-2024-34980 · Unknown · Best Bootstrap Widgets For Elementor

Name of the Vulnerable Software and Affected Versions: Best Bootstrap Widgets for Elementor versions 1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS attacks. This means an attacke...

CVE-2024-51940

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sohelwpexpert WP Responsive Video my-wp-responsive-video allows DOM-Based XSS.This issue affects WP Responsive Video: from n/a through = 1.0...

CVE-2024-51939

CVE-2024-51939 : A DOM-based XSS in the WordPress plugin Stylish Internal Links (vulnerable: versions up to 1.9). The issue is described as improper neutralization of input during web page generation, enabling cross-site scripting. Public references consistently identify this as a DOM-based XSS a...

CVE-2024-51940

CVE-2024-51940 describes a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin WP Responsive Video . The issue is due to improper neutralization of input during Web Page Generation, affecting plugin versions from n/a through 1.0. The connected documents confirm the plugin is vuln...