CVE-2024-45252 Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...

CVE-2024-45249 Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...

CVE-2024-47307

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Essential Plugin Meta slider and carousel with lightbox meta-slider-and-carousel-with-lightbox allows Stored XSS.This issue affects Meta slider and carousel with lightbox: from n/a through = 2.0.1...

CVE-2024-44036

CVE-2024-44036 is a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Kodex Posts likes (versions

CVE-2024-47322

CVE-2024-47322 applies to WordPress WP Timeline – Vertical and Horizontal timeline plugin (

CVE-2024-47347

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Chartify chart-builder allows Reflected XSS.This issue affects Chartify: from n/a through = 2.7.6...

CVE-2024-47327

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Reflected XSS.This issue affects GEO my WordPress: from n/a through = 4.5.0.3...

CVE-2024-47341

CVE-2024-47341: WP-DownloadManager

CVE-2024-47345

CVE-2024-47345 is a Cross-Site Scripting (XSS) vulnerability in the WordPress Starter Templates plugin (aka Starter Templates — Elementor, WordPress & Beaver Builder Templates) affecting versions up to 4.4.0. The issue arises from improper input neutralization during web page generation, enabling...

CVE-2024-47349

CVE-2024-47349 describes a Reflected Cross-Site Scripting (XSS) vulnerability in WordPress WPMobile.App (plugin), allowing unauthenticated attackers to trigger XSS via input during web page generation. Affected versions are listed as

CVE-2024-47349 WordPress WPMobile.App plugin <= 11.50 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Amauri WPMobile.App wpappninja.This issue affects WPMobile.App: from n/a through = 11.50...

CVE-2024-47366

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows Stored XSS.This issue affects Elementor Addon Elements: from n/a through = 1.13.6...

CVE-2024-47364

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through = 1.3.4...

CVE-2024-47363

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Blockspare Blockspare blockspare allows Stored XSS.This issue affects Blockspare: from n/a through = 3.2.4...

CVE-2024-47356

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in catchthemes Create create allows Stored XSS.This issue affects Create: from n/a through = 2.9.1...

CVE-2024-47360

CVE-2024-47360 : WordPress BA Book Everything plugin (vulnerable:

CVE-2024-47367

CVE-2024-47367 affects YITH WooCommerce Product Add-Ons (versions

CVE-2024-47368

CVE-2024-47368: Stored XSS in WordPress Premium Blocks – Gutenberg Blocks for WordPress (LeapWorx) affecting Premium Blocks for Gutenberg until v2.1.33; root cause is improper neutralization of input during web page generation. CVSSv3.1 base score 6.5 (medium). Patch/mitigation: fixed in v2.1.34;...

WordPress plugin Coming Soon Page, Under Construction 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Coming Soon Page, Under...

PT-2024-31509 · Elfsight · Elsight

Name of the Vulnerable Software and Affected Versions: Elsight affected versions not specified Description: The issue is related to improper neutralization of special elements used in an OS command, also known as OS Command Injection. This is classified as CWE-78. Recommendations: At the moment,...