CVE-2024-51802

CVE-2024-51802 is a DOM-based XSS vulnerability in the Bread & Butter WordPress plugin (Bread & Butter) affecting versions up to 7.4.857. The issue arises from improper neutralization of input during Web Page Generation, enabling cross-site scripting. Multiple connected sources (e.g., Red Hat adv...

CVE-2024-51803

CVE-2024-51803 affects Magnetic Creative’s WordPress plugin “Inline Click To Tweet.” The vulnerability is a DOM-based XSS triggered by improper neutralization of user input during web page generation, affecting the Inline Click To Tweet component from versions n/a to 1.0.0. The Connected document...

CVE-2024-51804 WordPress Moka Get Posts Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bobmatnyc Moka Get Posts Shortcode moka-get-posts allows DOM-Based XSS.This issue affects Moka Get Posts Shortcode: from n/a through = 1.0...

CVE-2024-51813 WordPress Anant Addons for Elementor plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in anantaddons Anant Addons for Elementor anant-addons-for-elementor allows DOM-Based XSS.This issue affects Anant Addons for Elementor: from n/a through = 1.0.5...

CVE-2024-51814

CVE-2024-51814 is a DOM-based XSS in WordPress plugin 活动链接推广插件 (yr-activity-link), with improper input neutralization during page generation. Affected versions: 1.2.0 and earlier (from n/a through 1.2.0). The CVSSv3.1 base score is 6.5 (Medium) with Network attack vector, Low/Low/Low impacts and ...

CVE-2024-51814 WordPress 活动链接推广插件 plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 野人 活动链接推广插件 allows DOM-Based XSS.This issue affects 活动链接推广插件: from n/a through 1.2.0...

CVE-2024-51814 WordPress 活动链接推广插件 plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 野人 活动链接推广插件 yr-activity-link allows DOM-Based XSS.This issue affects 活动链接推广插件: from n/a through = 1.2.0...

CVE-2024-51823

CVE-2024-51823 concerns the WordPress plugin Add Ribbon Shortcode (vulnerable up to 1.0.1) and describes a DOM‑Based XSS caused by improper input neutralization during web page generation. The description in the initial document states Cross-site Scripting for Add Ribbon Shortcode and lists affec...

CVE-2024-51825 WordPress Alert Me! plugin <= 0.4.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cristopher Ocaña Alert Me! allows DOM-Based XSS.This issue affects Alert Me!: from n/a through 0.4.0...

CVE-2024-51824 WordPress Advanced Video Player with Analytics plugin <= 1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Karam Singh Advanced Video Player with Analytics advanced-video-player-with-analytics allows DOM-Based XSS.This issue affects Advanced Video Player with Analytics: from n/a through = 1...

CVE-2024-51825

CVE-2024-51825 is a WordPress Alert Me! plugin vulnerability (

CVE-2024-51826 WordPress Bitcoin Payments plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in James Turner Bitcoin Payments allows DOM-Based XSS.This issue affects Bitcoin Payments: from n/a through 1.4.2...

CVE-2024-51826

CVE-2024-51826 is a DOM-based XSS in the WordPress Bitcoin Payments plugin up to version 1.4.2 (WordPress plugin). Root cause: improper input neutralization during web page generation. Impact per cited data: cross-site scripting with Low/Medium factors per CVSS (6.5, MEDIUM) across affected Bitco...

CVE-2024-51827

CVE-2024-51827 concerns Boombox Shortcode plugin for WordPress. The connected sources confirm a DOM-based XSS due to improper input neutralization during web page generation, affecting Boombox Shortcode versions n/a through 1.0.0. The vulnerability is categorized as Cross‑Site Scripting with a me...

CVE-2024-51836

CVE-2024-51836 (Wezido) is a DOM-Based XSS in Teconce Wezido (Wezido: from n/a through 1.2). The issue arises from improper input neutralization during web page generation and affects Wezido versions 1.2 and earlier. Connected PT-2024-34963 indicates a fix exists in a newer version and recommends...

CVE-2024-51836 WordPress Wezido plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teconce Wezido wezido-elementor-addon-based-on-easy-digital-downloads allows DOM-Based XSS.This issue affects Wezido: from n/a through = 1.2...

CVE-2024-51838

CVE-2024-51838 describes a DOM-based XSS in the WordPress plugin Pull This (by Jon Smajda), affecting versions from n/a through 1.1. The issue is triggered by improper input neutralization during web page generation. The connected documents confirm the vulnerability type and affected plugin, and ...

CVE-2024-51839 WordPress Utech Spinning Earth plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Meini Utech Spinning Earth allows DOM-Based XSS.This issue affects Utech Spinning Earth: from n/a through 1.2...

CVE-2024-51839 WordPress Utech Spinning Earth plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Meini Utech Spinning Earth utech-spinning-earth allows DOM-Based XSS.This issue affects Utech Spinning Earth: from n/a through = 1.2...

CVE-2024-51840

CVE-2024-51840 is a DOM-based XSS in the WordPress plugin Wd-image-magnifier-xoss by Rezaul Haque, affecting versions “from n/a through 1.0.” The description cites “Improper Neutralization of Input During Web Page Generation,” indicating that unsafe input handling in page rendering enables cross-...