CVE-2024-51585

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Sales Page Addon – Elementor & Beaver Builder sales-page-addon allows Stored XSS.This issue affects Sales Page Addon – Elementor & Beaver Builder: from n/a through = 1.4.5...

CVE-2024-51587

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in softfirm Definitive Addons for Elementor definitive-addons-for-elementor allows Stored XSS.This issue affects Definitive Addons for Elementor: from n/a through = 1.5.16...

CVE-2024-51593

CVE-2024-51593 is a stored XSS vulnerability in the WordPress Курс валют UAH plugin, involving improper input neutralization during page generation. Affected versions are n/a through 2.0. The connected sources (Patchstack and CVE records) confirm that the issue is a stored XSS in that plugin and ...

CVE-2024-51597

CVE-2024-51597 is a stored XSS vulnerability in WordPress ThemeShark Templates & Widgets for Elementor (themeshark-elementor). The issue arises from improper neutralization of input during web page generation, affecting the plugin versions up to 1.1.7. Public sources consistently describe it as S...

CVE-2024-51612

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designerken Reftagger Shortcode reftagger-shortcode allows Stored XSS.This issue affects Reftagger Shortcode: from n/a through = 1.1...

CVE-2024-51614

CVE-2024-51614 affects WordPress plugin “Aajoda Testimonials” (

CVE-2024-51696

CVE-2024-51696 is a reflected XSS in Content Syndication Toolkit Reader for WordPress, affecting versions up to 1.5. Root cause: improper input neutralization during web page generation. This entry notes Reflected XSS, but the connected documents do not provide an official patch/version that fixe...

CVE-2024-51699

CVE-2024-51699 is a reflected XSS in the Buooy Sticky Header WordPress plugin (Improper Neutralization of Input During Web Page Generation). Affected: Buooy Sticky Header versions up to 0.5.2 (and earlier/not explicitly fixed by a public patch in the available documents). Impact is reflected XSS,...

CVE-2024-51710

CVE-2024-51710 affects Minerva Infotech’s Responsive Data Table (WordPress plugin). It is a Reflected XSS vulnerability caused by improper input neutralization during web page generation, with CVSS v3.1 base score 7.1 (HIGH). Impact is listed as LOW for confidentiality, integrity, and availabilit...

CVE-2024-51712 WordPress Jigoshop plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Visser Jigoshop – Store Toolkit jigoshop-store-toolkit allows Reflected XSS.This issue affects Jigoshop – Store Toolkit: from n/a through = 1.4.0...

CVE-2024-51763

CVE-2024-51763 — Reflected XSS in WordPress plugin “Team Showcase and Slider – Team Members Builder.” Exploitation arises from improper input neutralization during web page generation, enabling reflected cross-site scripting. Affected software: Team Showcase and Slider – Team Members Builder, ver...

CVE-2024-51607

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in percent20 Golf Tracker golf-tracker allows SQL Injection.This issue affects Golf Tracker: from n/a through = 0.7...

CVE-2024-51786

CVE-2024-51786 is an XSS vulnerability in the WordPress plugin Realty by BestWebSoft. Affected are Realty by BestWebSoft versions up to 1.1.5 (inclusive). Root cause: improper neutralization of input during web page generation leading to Stored XSS. Impacted contexts can execute scripts in the vi...

CVE-2024-51696: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ben.moody Content Syndication Toolkit Reader content-syndication-toolkit-reader allows Reflected XSS.This issue affects Content Syndication Toolkit Reader: from n/a through = 1.5...

CVE-2024-51698: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Luis Rock Master Bar master-bar allows Reflected XSS.This issue affects Master Bar: from n/a through = 1.0...

CVE-2024-51786: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bestweblayout Realty by BestWebSoft realty allows Stored XSS.This issue affects Realty by BestWebSoft: from n/a through = 1.1.5...

CVE-2024-51594: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rafel.sanso Gmap Point List gmap-point-list allows Stored XSS.This issue affects Gmap Point List: from n/a through = 1.1.2...

CVE-2024-51693: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in labdav Search order by product SKU for WooCommerce search-order-by-product-sku-for-woocommerce allows Reflected XSS.This issue affects Search order by product SKU for WooCommerce: from n/a through ...

PT-2024-34764 · Porsline · Porsline

Name of the Vulnerable Software and Affected Versions: Porsline versions 1.0.2 and earlier Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection', which allows Blind SQL Injection. Recommendations: For Porsline...

CVE-2024-51710: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Minerva Infotech Responsive Data Table responsive-data-table allows Reflected XSS.This issue affects Responsive Data Table: from n/a through = 1.3...