CVE-2024-34369

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webpushr Web Push Notifications Webpushr allows Reflected XSS.This issue affects Webpushr: from n/a through 4.35.0...

CVE-2024-34366 WordPress AltText.ai plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AltText.Ai Download Alt Text AI allows Stored XSS.This issue affects Download Alt Text AI: from n/a through 1.3.4...

CVE-2024-34390

CVE-2024-34390 is a stored XSS in WordPress plugin Post Grid Master (Ajax Filter Everything) that affects Post Grid Master versions up to 3.4.8 (and from n/a through 3.4.8). The issue arises from improper input neutralization during web page generation. The vulnerability has a CVSS v3.1 base scor...

CVE-2024-33946

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPify s.R.O. WPify Woo Czech allows Reflected XSS.This issue affects WPify Woo Czech: from n/a through 4.0.10...

CVE-2024-33934

CVE-2024-33934 affects Mini Loops WordPress plugin (versions

CVE-2024-33936

CVE-2024-33936 is a Stored Cross-Site Scripting (XSS) vulnerability in Twinpictures Print-O-Matic for WordPress, affecting Print-O-Matic: from n/a through 2.1.10. The issue arises from improper input neutralization during web page generation. No exploits or vectors are provided in the documents. ...

CVE-2024-33946

CVE-2024-33946 is a reflected XSS in WPify Woo Czech (WordPress plugin). Affected: WPify Woo Czech up to version 4.0.10. Impact per CVSS: Confidentiality, Integrity, Availability - Low. Root cause: improper input handling during web page generation. Exploitation vector: reflected input. Remediati...

CVE-2024-33949

CVE-2024-33949 is a Stored XSS in the Min and Max Purchase for WooCommerce WordPress plugin (

CVE-2024-33631

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Piotnet Piotnet Addons For Elementor Pro allows Stored XSS.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17...

CVE-2024-33548

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA-Team WZone allows Reflected XSS.This issue affects WZone: from n/a through 14.0.10...

CVE-2024-33540

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill ColorNews allows Stored XSS.This issue affects ColorNews: from n/a through 1.2.6...

CVE-2024-33539

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPZOOM WPZOOM Addons for Elementor Templates, Widgets allows Stored XSS.This issue affects WPZOOM Addons for Elementor Templates, Widgets: from n/a through 1.1.35...

CVE-2024-33546

CVE-2024-33546 is an unauthenticated SQL Injection in the WooCommerce Amazon Affiliates/WooZone plugin for WordPress, affecting WZone up to version 14.0.10. The CVSS v3.1 base vector indicates network access (AV:N) with low attack complexity (AC:L) and requires low privileges (PR:L) with no user ...

CVE-2024-33554

CVE-2024-33554 : Reflected XSS in 8theme XStore Core due to improper input neutralization during web page generation. Affected: XStore Core from n/a up to 5.3.5. Consequences include potential script execution in a victim’s browser when interacting with vulnerable pages. Connected sources (e.g., ...

CVE-2024-33643

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kailey Lampert Advanced Most Recent Posts Mod allows Stored XSS.This issue affects Advanced Most Recent Posts Mod: from n/a through 1.6.5.2...

CVE-2024-33640

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LBell Pretty Google Calendar allows Stored XSS.This issue affects Pretty Google Calendar: from n/a through 1.7.2...

CVE-2024-33571

CVE-2024-33571 is a Reflected XSS vulnerability in VOD Infomaniak (Infomaniak Staff VOD) for WordPress. The vulnerability affects VOD Infomaniak versions from n/a up to 1.5.6 and is triggered via improper input handling during web page generation. The connected Wordfence/KV data confirms the exis...

CVE-2024-33640

CVE-2024-33640 is a stored XSS in the Pretty Google Calendar WordPress plugin (LBell Pretty Google Calendar) affecting versions up to 1.7.2. Root cause: improper neutralization of user input during web page generation, enabling stored cross-site scripting. Impact per CVSS: low confidentiality, in...

CVE-2024-33645

CVE-2024-33645 refers to an “Improper Neutralization of Input During Web Page Generation” in the Easy Set Favicon WordPress plugin (affected: Easy Set Favicon, up to version 1.1, has n/a as lower bound). The vulnerability enables a Reflected XSS as stated in the CVE description. Core details from...

CVE-2024-33648

CVE-2024-33648 is a Stored XSS in Recencio Book Reviews (WordPress plugin). Affected: Recencio Book Reviews versions up to 1.66.0. Issue arises from improper neutralization of input during web page generation. CVSS v3.1 base score 6.5 (Medium); attack requires user interaction and is exploitable ...