CVE-2024-32553

CVE-2024-32553 affects WordPress Plugin – WordPress Menu Plugin (Superfly Menu). Vulnerable component is looks_awesome functionality (stored XSS) with root cause described as improper neutralization of input during web page generation. Impact per sources is Stored XSS with confidentiality/integri...

CVE-2024-32556 WordPress HurryTimer plugin <=2.9.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nabil Lemsieh HurryTimer allows Stored XSS.This issue affects HurryTimer: from n/a through 2.9.2...

CVE-2024-32558

CVE-2024-32558 is a reflected XSS in the WordPress plugin “eCommerce Product Catalog” by impleCode, affecting versions from unknown up to 3.3.32. The issue stems from improper input neutralization during web page generation, enabling Reflected XSS payloads. Wordfence/Red Hat entries indicate the ...

CVE-2024-32564

CVE-2024-32564 affects Post Grid Gutenberg Blocks and PostX (Post Grid for WordPress) with a Stored XSS in Post Grid blocks (improper input neutralization during page generation). Affected versions: PostX – Gutenberg Blocks for Post Grid up to 4.0.1. Root cause: improper neutralization of input; ...

CVE-2024-32565

CVE-2024-32565 affects App Builder (Appcheap.IO) WordPress plugin. It is a Stored XSS via Shortcode caused by improper input neutralization during web page generation, affecting App Builder versions up to 3.8.8 (from n/a). The vulnerability is documented with a 3.8.8 upper bound and a Patch Statu...

CVE-2024-32568

The CVE-2024-32568 entry concerns Melapress WP 2FA with a Reflected XSS due to improper input neutralization in web page generation. Affected versions are from n/a through 2.6.2. The provided documents do not specify a vendor, product build, or a confirmed patch/mitigation. No exploit details or ...

CVE-2024-32570 WordPress Cornerstone plugin <= 0.8.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Archetyped Cornerstone allows Reflected XSS.This issue affects Cornerstone: from n/a through 0.8.0...

CVE-2024-32573

CVE-2024-32573 is a Stored XSS in the WP-Lister Lite for eBay WordPress plugin. Affected: WP-Lister Lite for eBay, from n/a through 3.5.11. Root cause: improper neutralization during web page generation. Impact: Low confidentiality/integrity/availability if exploited; exploit requires stored inpu...

CVE-2024-32574

CVE-2024-32574 is a Reflected XSS in the WordPress plugin WP Simple HTML Sitemap, affecting versions &lt;= 2.8. The flaw arises from improper neutralization of input during page generation, enabling attackers to inject scripts via input parameters. The vulnerability is documented as patched in ve...

CVE-2024-32575

CVE-2024-32575 affects Mega Elements – Addons for Elementor. The vulnerability is a Stored Cross-Site Scripting (XSS) in Mega Elements &lt;= 1.1.9. Public sources (Red Hat advisory and Wordfence vulnerability details) confirm the affected product and the issue type. The issue arises from improper...

CVE-2024-32576

The CVE-2024-32576 entry concerns the WordPress plugin BA Book Everything (WordPress Plugin) with versions ≤ 1.6.8. The vulnerability is a Cross-Site Scripting (XSS) flaw caused by improper neutralization during web page generation, resulting in stored XSS. Affected component: the WordPress plugi...

CVE-2024-32577

CVE-2024-32577 – CBX Bookmark & Favorite (cbxwpbookmark) Stored XSS in the WordPress CBXWPBookmark plugin. Affects CBX Bookmark & Favorite:

CVE-2024-32581

CVE-2024-32581 is a Stored XSS in Mortgage Calculators WP plugin affecting versions up to 1.56. Root cause: Improper input neutralization during web page generation. Impact (per provided metrics): low to moderate across confidentiality, integrity, availability; overall CVSS 3.1 base score 6.5 (ME...

CVE-2024-32582

CVE-2024-32582 is a Stored XSS vulnerability in the WordPress plugin Debug Log Manager (vulnerable from n/a up to 2.3.1). The issue arises from improper input neutralization during web page generation, enabling malicious scripts to be stored and executed in a user’s browser. The CVSS score in pro...

CVE-2024-32583

CVE-2024-32583 concerns WordPress Photo Gallery by 10Web plugin. A Reflected Cross-Site Scripting (XSS) vulnerability exists in versions up to and including 1.8.21, allowing unauthenticated attackers to inject scripts via input that is reflected in page generation. The issue affects the plugin’s ...

CVE-2024-32584

Technical details about CVE-2024-32584 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-32587

CVE-2024-32587 affects EnvialoSimple EnvíaloSimple (WordPress plugin) with a Reflected XSS in the plugin’s web page generation. Affected range: EnvíaloSimple from n/a through 2.2; connected Red Hat/ENISA entries confirm the cross-site scripting issue. The Wordfence vulnerability record shows a PA...

CVE-2024-32595

CVE-2024-32595 is a Reflected XSS affecting WP Helper Premium for WordPress (pre-4.6.0). Affected component: WP Helper Premium plugin; root cause: improper input neutralization during web page generation leading to reflected script execution. Impact: low to high depending on context (per CVSS v3....

CVE-2024-32596

CVE-2024-32596 is a Stored XSS vulnerability in the DSGVO Youtube WordPress plugin. Affected: DSGVO Youtube versions n/a through 1.4.5. Root cause: improper input neutralization during web page generation leading to stored cross-site scripting. Impact: stored XSS could compromise users who load v...

CVE-2024-32598

CVE-2024-32598 affects BA Book Everything (WordPress plugin) with Stored XSS via shortcode in versions up to 1.6.8. Root cause: Improper input neutralization during web page generation. Impact per sources: potential stored XSS within affected pages; remediation: upgrade to v1.6.8 (patched). Not a...