CVE-2024-32723

CVE-2024-32723 affects the WordPress plugin Advanced Floating Content Lite (v0 through 1.2.5). It is a Stored XSS due to improper neutralization of input during web page generation. The connected documents do not provide a specific exploit path or a confirmed fix/version beyond the affected range.

CVE-2024-32952

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BloomPixel Max Addons Pro for Bricks allows Reflected XSS.This issue affects Max Addons Pro for Bricks: from n/a through 1.6.1...

CVE-2024-32791

CVE-2024-32791 affects Premium Addons for Elementor (LeaP13 Premium Addons for Elementor) with a Stored XSS in versions up to 4.10.25 due to improper input neutralization during web page generation. Affected product: Premium Addons for Elementor. Root cause: insufficient escaping/validation of sh...

CVE-2024-32801

Technical details for CVE-2024-32801 are not provided in the connected documents. No specifics on affected product/version/root cause/fix are given beyond the initial XSS description. Monitor for updates.

CVE-2024-32956

CVE-2024-32956: Stored XSS in RomethemeKit For Elementor (WordPress plugin). Affected: RomethemeKit For Elementor up to version 1.4.1. Root cause: improper input handling during web page generation leading to stored cross-site scripting. Impact details are limited in the provided documents beyond...

CVE-2024-32709

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Plechev Andrey WP-Recall.This issue affects WP-Recall: from n/a through 16.26.5...

CVE-2024-32706

The ARForms WordPress plugin (versions

CVE-2024-32723: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Code Tides Advanced Floating Content allows Stored XSS.This issue affects Advanced Floating Content: from n/a through 1.2.5...

CVE-2024-32707: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Image Slider Widget allows Stored XSS.This issue affects Image Slider Widget: from n/a through 1.1.125...

CVE-2024-32834: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee WooCommerce Shipping Label allows Stored XSS.This issue affects WooCommerce Shipping Label: from n/a through 2.3.8...

CVE-2023-25790: Improper Authentication

Improper Authentication, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xtemos WoodMart allows Cross-Site Scripting XSS.This issue affects WoodMart: from n/a through 7.0.4...

CVE-2024-32697

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HelloAsso allows Stored XSS.This issue affects HelloAsso: from n/a through 1.1.5...

CVE-2024-32697

Technical details about CVE-2024-32697 (HelloAsso) are not provided in the supplied documents. Monitor official advisories and vendor/security partner updates for full technical specifics and remediation.

CVE-2024-32553

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in looksawesome Superfly Menu superfly-menu.This issue affects Superfly Menu: from n/a through = 5.0.25...

CVE-2024-32602

CVE-2024-32602 is an SQL Injection flaw in OnTheGoSystems WooCommerce Multilingual & Multicurrency (affecting 5.3.3.1 and earlier). Root cause: improper neutralization of SQL elements in the plugin’s queries. Impact: high risk to confidentiality and integrity of database content; authenticated at...

CVE-2023-49768

The CVE-2023-49768 issue is a Stored XSS in WP-FormAssembly (FormAssembly) for WordPress, caused by improper input neutralization during web page generation. Affected: WP-FormAssembly up to version 2.0.10 (Authenticated use level: Contributor+). The connected Red Hat and Wordfence entries corrobo...

CVE-2024-32582

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bowo Debug Log Manager allows Stored XSS.This issue affects Debug Log Manager: from n/a through 2.3.1...

CVE-2024-32583

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Reflected XSS.This issue affects Photo Gallery by 10Web: from n/a through 1.8.21...

CVE-2024-32576

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8...

CVE-2024-32564

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPXPO PostX ultimate-post allows DOM-Based XSS.This issue affects PostX: from n/a through = 4.0.1...