CVE-2024-35687

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library link-library allows Reflected XSS.This issue affects Link Library: from n/a through 7.6.3...

CVE-2024-35688

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through 2.0.5.9...

CVE-2024-35681

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in gVectors Team wpDiscuz allows Stored XSS.This issue affects wpDiscuz: from n/a through 7.6.18...

CVE-2024-35679

The GiveWP WordPress plugin (versions 3.12.0 and earlier ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This vulnerability allows an attacker to execute malicious scripts in a victim's browser. To remediate this i...

CVE-2024-34765

CVE-2024-34765 is a Stored XSS in Sensei Pro (WC Paid Courses) for Sensei LMS, affecting Sensei Pro: from n/a through 4.23.1.1.23.1. Red Hat’s advisory reiterates the same description. The initial data indicates this requires updating Sensei Pro to a fixed version (4.23.1.1.23.1) to mitigate the ...

CVE-2024-35688

WordPress Master Addons for Elementor plugin ( 2.0.5.9, specifically fixed in 2.0.6.0. Patch sources (Patchstack) note low exploit likelihood; no exploitation details provided in the document set. References include Patchstack entries indicating vulnerability and fix. Monitor for updates as detai...

CVE-2024-35693

The Code for Recovery 12 Step Meeting List WordPress plugin, versions up to and including 3.14.33 , is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation, which allows an attacker to execute malicious scripts in a...

CVE-2024-35698 WordPress YITH WooCommerce Tab Manager plugin <= 1.35.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in YITH YITH WooCommerce Tab Manager allows Stored XSS.This issue affects YITH WooCommerce Tab Manager: from n/a through 1.35.0...

CVE-2024-35699

CVE-2024-35699 is a Stored XSS flaw in HT Feed (HasThemes) affecting HT Feed versions up to 1.2.8. The issue arises from improper input neutralization during web page generation, enabling authenticated users to inject scripts. Red Hat/ENISA Wordfence context confirms the vulnerability and notes a...

CVE-2024-35702

CVE-2024-35702 affects WordPress Master Addons for Elementor plugin (

CVE-2024-35709

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through = 5.5.4...

CVE-2024-35707

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Team Heateor Heateor Social Login allows Stored XSS.This issue affects Heateor Social Login: from n/a through 1.1.32...

CVE-2024-35703

The CVE-2024-35703 entry concerns WordPress plugin Sina Extension for Elementor (≤ 3.5.3). The vulnerability is an Improper Neutralization of Input During Web Page Generation (Stored XSS) in the Sina Extension for Elementor, allowing stored cross-site scripting. Affected component: the plugin’s i...

CVE-2024-35709

CVE-2024-35709 is a Stored XSS vulnerability in WordPress The Plus Addons for Elementor Page Builder Lite (versions up to and including 5.5.4). The issue stems from improper input neutralization during web page generation, enabling stored XSS. Affected product: The Plus Addons for Elementor Page ...

CVE-2024-35711

CVE-2024-35711 describes a Stored XSS in Theme Freesia Event (WordPress) via Improper Neutralization of Input During Web Page Generation. Affects Event: from n/a through 1.2.2. Connected docs confirm the product and vulnerability class but do not provide a patch/version fix details. No exploit ve...

CVE-2024-35715

CVE-2024-35715: Stored XSS in Bloglo and Blogvi WordPress themes/plugins due to improper input neutralization during page generation. Affected: Bloglo up to 1.1.3; Blogvi up to 1.0.5. Root cause as described; no explicit exploitation details provided in the available documents. Patch/mitigation s...

CVE-2024-35718

CVE-2024-35718 is a Reflected XSS in the WordPress Newsletters plugin (Newsletters

CVE-2024-35752

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Enea Overclokk Stellissimo Text Box allows Stored XSS.This issue affects Stellissimo Text Box: from n/a through 1.1.4...

CVE-2024-35739

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through = 7.7.1...

CVE-2024-35733

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in RLDD Auto Coupons for WooCommerce allows Reflected XSS.This issue affects Auto Coupons for WooCommerce: from n/a through 3.0.14...