2462 matches found
CVE-2024-35167
CVE-2024-35167 is a Stored XSS in Envo’s Elementor Templates & Widgets for WooCommerce (Envo Elemento r for WooCommerce). The issue arises from improper input neutralization during web page generation, affecting versions from non-applicable to 1.4.8. Public references in connected documents confi...
CVE-2024-4747
CVE-2024-4747 affects Propovoice: All-in-One Client Management System (Propovoice CRM) for WordPress. Unauthenticated stored cross-site scripting vulnerability present in Propovoice CRM versions up to 1.7.6.2. A fix/patch has been issued (patched in the Wordfence entry); affected users should upd...
CVE-2024-34811
CVE-2024-34811 is an Improper Neutralization of Input During Web Page Generation (Stored XSS) in VeronaLabs WP SMS. Affected: WP SMS up to v6.5.1. Root cause: input is not properly sanitized during page generation. Impact: stored cross-site scripting vulnerability. Remediation: patched in public ...
CVE-2024-34417
Technical details for CVE-2024-34417 are not provided in the connected documents. Public information appears limited to a general description of Stored XSS in Viet Nam Affiliate plugin versions up to 1.0.0. Monitor for updates.
CVE-2024-34423 WordPress Forty Four – 404 Plugin for WordPress plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in phpbits Forty Four – 404 Plugin for WordPress allows Stored XSS.This issue affects Forty Four – 404 Plugin for WordPress: from n/a through 1.4...
CVE-2024-34425
CVE-2024-34425 is a Stored XSS in the QuickieBar WordPress plugin (Phil Baylog QuickieBar). Affected: QuickieBar versions up to and including 1.8.4. Root cause described as improper neutralization during web page generation; no public details on exploitation or fixes are provided in the connected...
CVE-2024-34426
CVE-2024-34426 refers to a Stored XSS in the Brozzme Scroll Top WordPress plugin (Brozzme Scroll Top) affecting versions up to 1.8.5. The connected data indicates this is an authenticated, admin‑level vulnerability with the issue being present and currently Unpatched; no vendor patch/version reme...
CVE-2024-34546
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Habibur Rahman Sticky Social Link sticky-social-link allows DOM-Based XSS.This issue affects Sticky Social Link: from n/a through = 2.0.1...
CVE-2024-34547
CVE-2024-34547 is a Stored XSS vulnerability in Magical Addons For Elementor for WordPress. Affected versions are from n/a through 1.1.34. Root cause: Improper neutralization of input during web page generation, enabling injection that persists in stored content. Impact: stored cross-site scripti...
CVE-2024-34562
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through 1.3.0...
CVE-2024-34561
CVE-2024-34561 affects the Real 3D FlipBook WordPress Plugin family (3D FlipBook, PDF Viewer, PDF Embedder). Connected data confirms a Stored Cross-Site Scripting vulnerability in 3D FlipBook
CVE-2024-34566
CVE-2024-34566 is a Stored XSS in Content Blocks (Custom Post Widget) for WordPress. The issue arises from improper input neutralization during web page generation. Affected: Content Blocks (Custom Post Widget)
CVE-2024-34568
CVE-2024-34568 affects the WordPress LetterPress Newsletter plugin, versions <= 1.2.1. Root cause: Improper neutralization of input during web page generation, leading to Stored XSS. Impact is documented as Cross-Site Scripting with low CVSS v3.1 base score (5.9) and low overall severity; expl...
CVE-2024-34572
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemePrix Fancy Elementor Flipbox fancy-elementor-flipbox allows Stored XSS.This issue affects Fancy Elementor Flipbox: from n/a through 2.4.2...
CVE-2024-34571
CVE-2024-34571 corresponds to ThemeGrill Himalayas, a WordPress theme. Public records show an Authenticated Stored XSS in Himalayas up to version 1.3.0 due to improper input neutralization during web page generation. The risk is described as stored XSS with authenticated access (Contributor+). Re...
CVE-2024-34369
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webpushr Web Push Notifications Webpushr allows Reflected XSS.This issue affects Webpushr: from n/a through 4.35.0...
CVE-2024-34366 WordPress AltText.ai plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AltText.Ai Download Alt Text AI allows Stored XSS.This issue affects Download Alt Text AI: from n/a through 1.3.4...
CVE-2024-34390
CVE-2024-34390 is a stored XSS in WordPress plugin Post Grid Master (Ajax Filter Everything) that affects Post Grid Master versions up to 3.4.8 (and from n/a through 3.4.8). The issue arises from improper input neutralization during web page generation. The vulnerability has a CVSS v3.1 base scor...
CVE-2024-33946
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPify s.R.O. WPify Woo Czech allows Reflected XSS.This issue affects WPify Woo Czech: from n/a through 4.0.10...