CVE-2023-49768

The CVE-2023-49768 issue is a Stored XSS in WP-FormAssembly (FormAssembly) for WordPress, caused by improper input neutralization during web page generation. Affected: WP-FormAssembly up to version 2.0.10 (Authenticated use level: Contributor+). The connected Red Hat and Wordfence entries corrobo...

CVE-2024-32583

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Reflected XSS.This issue affects Photo Gallery by 10Web: from n/a through 1.8.21...

CVE-2024-32582

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bowo Debug Log Manager allows Stored XSS.This issue affects Debug Log Manager: from n/a through 2.3.1...

CVE-2024-32576

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8...

CVE-2024-32564

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPXPO PostX ultimate-post allows DOM-Based XSS.This issue affects PostX: from n/a through = 4.0.1...

CVE-2024-32553

CVE-2024-32553 affects WordPress Plugin – WordPress Menu Plugin (Superfly Menu). Vulnerable component is looks_awesome functionality (stored XSS) with root cause described as improper neutralization of input during web page generation. Impact per sources is Stored XSS with confidentiality/integri...

CVE-2024-32556 WordPress HurryTimer plugin <=2.9.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nabil Lemsieh HurryTimer allows Stored XSS.This issue affects HurryTimer: from n/a through 2.9.2...

CVE-2024-32558

CVE-2024-32558 is a reflected XSS in the WordPress plugin “eCommerce Product Catalog” by impleCode, affecting versions from unknown up to 3.3.32. The issue stems from improper input neutralization during web page generation, enabling Reflected XSS payloads. Wordfence/Red Hat entries indicate the ...

CVE-2024-32564

CVE-2024-32564 affects Post Grid Gutenberg Blocks and PostX (Post Grid for WordPress) with a Stored XSS in Post Grid blocks (improper input neutralization during page generation). Affected versions: PostX – Gutenberg Blocks for Post Grid up to 4.0.1. Root cause: improper neutralization of input; ...

CVE-2024-32565

CVE-2024-32565 affects App Builder (Appcheap.IO) WordPress plugin. It is a Stored XSS via Shortcode caused by improper input neutralization during web page generation, affecting App Builder versions up to 3.8.8 (from n/a). The vulnerability is documented with a 3.8.8 upper bound and a Patch Statu...

CVE-2024-32568

The CVE-2024-32568 entry concerns Melapress WP 2FA with a Reflected XSS due to improper input neutralization in web page generation. Affected versions are from n/a through 2.6.2. The provided documents do not specify a vendor, product build, or a confirmed patch/mitigation. No exploit details or ...

CVE-2024-32570 WordPress Cornerstone plugin <= 0.8.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Archetyped Cornerstone allows Reflected XSS.This issue affects Cornerstone: from n/a through 0.8.0...

CVE-2024-32573

CVE-2024-32573 is a Stored XSS in the WP-Lister Lite for eBay WordPress plugin. Affected: WP-Lister Lite for eBay, from n/a through 3.5.11. Root cause: improper neutralization during web page generation. Impact: Low confidentiality/integrity/availability if exploited; exploit requires stored inpu...

CVE-2024-32574

CVE-2024-32574 is a Reflected XSS in the WordPress plugin WP Simple HTML Sitemap, affecting versions &lt;= 2.8. The flaw arises from improper neutralization of input during page generation, enabling attackers to inject scripts via input parameters. The vulnerability is documented as patched in ve...

CVE-2024-32575

CVE-2024-32575 affects Mega Elements – Addons for Elementor. The vulnerability is a Stored Cross-Site Scripting (XSS) in Mega Elements &lt;= 1.1.9. Public sources (Red Hat advisory and Wordfence vulnerability details) confirm the affected product and the issue type. The issue arises from improper...

CVE-2024-32576

The CVE-2024-32576 entry concerns the WordPress plugin BA Book Everything (WordPress Plugin) with versions ≤ 1.6.8. The vulnerability is a Cross-Site Scripting (XSS) flaw caused by improper neutralization during web page generation, resulting in stored XSS. Affected component: the WordPress plugi...

CVE-2024-32577

CVE-2024-32577 – CBX Bookmark & Favorite (cbxwpbookmark) Stored XSS in the WordPress CBXWPBookmark plugin. Affects CBX Bookmark & Favorite:

CVE-2024-32581

CVE-2024-32581 is a Stored XSS in Mortgage Calculators WP plugin affecting versions up to 1.56. Root cause: Improper input neutralization during web page generation. Impact (per provided metrics): low to moderate across confidentiality, integrity, availability; overall CVSS 3.1 base score 6.5 (ME...

CVE-2024-32582

CVE-2024-32582 is a Stored XSS vulnerability in the WordPress plugin Debug Log Manager (vulnerable from n/a up to 2.3.1). The issue arises from improper input neutralization during web page generation, enabling malicious scripts to be stored and executed in a user’s browser. The CVSS score in pro...

CVE-2024-32583

CVE-2024-32583 concerns WordPress Photo Gallery by 10Web plugin. A Reflected Cross-Site Scripting (XSS) vulnerability exists in versions up to and including 1.8.21, allowing unauthenticated attackers to inject scripts via input that is reflected in page generation. The issue affects the plugin’s ...