CVE-2024-51912

CVE-2024-51912 is a DOM-based Cross-Site Scripting vulnerability in IntelliWidget Elements (WordPress IntelliWidget Elements), allowing input handling to be improperly neutralized during web page generation. The issue affects IntelliWidget Elements versions up to 2.2.7 (no details on fixed versio...

CVE-2024-51916 WordPress Multifox Plus plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Brahma Multifox Plus multifox-plus allows DOM-Based XSS.This issue affects Multifox Plus: from n/a through = 1.1.6...

CVE-2024-51916

CVE-2024-51916 affects the WordPress plugin Multifox Plus (versions

CVE-2024-51918

CVE-2024-51918 is a DOM-based XSS in WordPress Pay With Stripe (plugin) up to version 1.2.1, caused by improper input neutralization during page generation. The CVSS v3.1 base score is 6.5 (Medium); attack vector is network, require user interaction, and the change in scope. References indicate t...

CVE-2024-51920

CVE-2024-51920 affects Map Store Locator (WordPress plugin) versions 1.2.1 and earlier. Root cause: improper input neutralization during web page generation, enabling DOM-Based XSS. Impact: DOM-based cross-site scripting as described; no exploitation details provided in the sources. Remediation: ...

CVE-2024-51921

CVE-2024-51921 pertains to the WordPress plugin scrollup (Midori) and is described as an input sanitization flaw that enables cross-site scripting. Technical details across connected docs indicate the issue affects scrollup versions up to 1.1 (n/a through 1.1) and is characterized as a Cross-Site...

CVE-2024-51921 WordPress scrollup plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in midori scrollup scrollup allows DOM-Based XSS.This issue affects scrollup: from n/a through = 1.1...

CVE-2024-51927

CVE-2024-51927 is linked to Rig Elements For Elementor (WordPress plugin). Connected sources indicate an authenticated, DOM-based Cross-Site Scripting vulnerability in Rig Elements For Elementor, affecting versions up to 1.0 (auth+ requirement implied). The issue arises from improper input handli...

CVE-2024-51929 WordPress Icon Widget plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in philspectrum Icon Widget icon-widget-with-links allows DOM-Based XSS.This issue affects Icon Widget: from n/a through = 1.1.0...

CVE-2024-51929

CVE-2024-51929 is a DOM-based XSS in the WordPress Icon Widget ( Phil Spectrum Icon Widget ) caused by improper input neutralization during page generation. Affected: Icon Widget

CVE-2024-51928

CVE-2024-51928 is a WordPress plugin vulnerability in Blocks Post Grid (

CVE-2024-51931

CVE-2024-51931 is a DOM-based XSS affecting the WordPress plugin AzonBox (versions up to 1.1.2). The issue arises from improper input neutralization during web-page generation, enabling cross-site scripting via manipulated input in the plugin. Public references (RH, NVD, CVE listings) describe th...

CVE-2024-51932 WordPress Kings Tab Slider plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saif Bin-Alam Kings Tab Slider allows DOM-Based XSS.This issue affects Kings Tab Slider: from n/a through 1.0...

CVE-2024-51935 WordPress Fast Video and Image Display plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sam Perrow Fast Video and Image Display fast-video-and-image-display allows DOM-Based XSS.This issue affects Fast Video and Image Display: from n/a through = 2.5.2...

CVE-2024-51937 WordPress IA Map Analytics Basic plugin <= 20170413 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bnisia IA Map Analytics Basic ia-map-analytics-basic allows DOM-Based XSS.This issue affects IA Map Analytics Basic: from n/a through = 20170413...

CVE-2024-51938 WordPress Charity Addon for Elementor plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Charity Addon for Elementor charity-addon-for-elementor allows DOM-Based XSS.This issue affects Charity Addon for Elementor: from n/a through = 1.3.2...

PT-2024-35068 · Unknown · Fast Video/Image Display

Name of the Vulnerable Software and Affected Versions: Fast Video and Image Display versions n/a through 2.5.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an...

PT-2024-35024 · Elementor · Postify: Post Layout For Elementor

Name of the Vulnerable Software and Affected Versions: Postify: Post Layout For Elementor versions 1.0.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means an attacker could potentially inject...

PT-2024-34924 · Unknown · Ultimate Accordion

Name of the Vulnerable Software and Affected Versions: Ultimate Accordion versions 1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means an attacker could potentially inject malicious scripts in...

PT-2024-34334 · Wm Zoom · Wm Zoom

Name of the Vulnerable Software and Affected Versions: WM Zoom versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. Specifically, it is a DOM-Based XSS vulnerability. This means that the...