CVE-2024-56254

CVE-2024-56254 concerns Move Addons for Elementor. The initial description specifies an input- handling flaw that leads to a Stored XSS in Move Addons for Elementor, affecting versions from n/a up to and including 1.3.6. Connected documents corroborate the same vulnerability as a Stored Cross-Sit...

CVE-2024-56240

CVE-2024-56240 (Pronamic Google Maps) is a stored XSS in Pronamic Google Maps plugin for WordPress. Affected versions: from n/a through 2.3.2. Root cause: improper neutralization of input during web page generation. Impact per sources: confidentiality, integrity, and availability may be affected ...

CVE-2024-56025

CVE-2024-56025 : Reflected XSS in the WordPress plugin AdWork Media EZ Content Locker (adwork-media-ez-content-locker) allowing exploitation via malicious input that is not properly neutralized during web page generation. Affected: AdWork Media EZ Content Locker for WordPress, versions n/a throug...

CVE-2024-56024 WordPress Custom Dashboard Widget plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DuoGeek Custom Dashboard Widget allows Reflected XSS.This issue affects Custom Dashboard Widget: from n/a through 1.0.0...

CVE-2024-56018 WordPress BU Section Editing Plugin <= 0.9.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Boston University IS&T BU Section Editing allows Reflected XSS.This issue affects BU Section Editing: from n/a through 0.9.9...

CVE-2024-56037

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SoftClever Limited User Referral user-referral-free allows Reflected XSS.This issue affects User Referral: from n/a through = 8.0...

CVE-2024-56038

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in catalinsendsms SendSMS sendsms allows Reflected XSS.This issue affects SendSMS: from n/a through = 1.2.9...

CVE-2024-56060

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Link Software LLC HTML Forms html-forms allows Reflected XSS.This issue affects HTML Forms: from n/a through = 1.4.1...

CVE-2024-56030

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Carver Lab 10CentMail 10centmail-subscription-management-and-analytics allows Reflected XSS.This issue affects 10CentMail: from n/a through = 2.1.50...

CVE-2024-56034 WordPress Services updates for customers plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Irshad Services updates for customers allows Reflected XSS.This issue affects Services updates for customers: from n/a through 1.0...

CVE-2024-56036

CVE-2024-56036 pertains to the odPhotogallery WordPress plugin. The connected sources confirm a Reflected XSS vulnerability caused by improper input neutralization during web page generation in odPhotogallery, affecting versions from n/a through 0.5.3. The CVE description cites a cross-site scrip...

PT-2025-3171 · WordPress · Wp Ecommerce Quickpay

Name of the Vulnerable Software and Affected Versions: WP eCommerce Quickpay versions 1.1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attacker can inject...

PT-2025-3185 · Unknown · Md Maruf Adnan Sami User Referral

Name of the Vulnerable Software and Affected Versions: Md Maruf Adnan Sami User Referral versions n/a through 8.0 Description: The issue affects Md Maruf Adnan Sami User Referral, allowing Reflected XSS due to improper neutralization of input during web page generation. This is a type of Cross-si...

PT-2025-3176 · Unknown · Lemonade Social Networks Autoposter Pinterest

Name of the Vulnerable Software and Affected Versions: Lemonade Social Networks Autoposter Pinterest versions n/a through 2.0 Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This problem enables...

PT-2025-3181

Name of the Vulnerable Software and Affected Versions Think201 FAQs versions n/a through 1.0.2 Description The issue is related to improper neutralization of input during web page generation, which allows Reflected Cross-site Scripting XSS. This problem affects the Think201 FAQs, enabling reflect...

PT-2025-3232

Name of the Vulnerable Software and Affected Versions WP Hait Post Grid Elementor Addon versions prior to 2.0.19 Description The issue is related to improper neutralization of input during web page generation, allowing stored Cross-site Scripting XSS. This enables attackers to inject malicious...

PT-2025-3218 · Themelooks · Themelooks Enter Addons

Name of the Vulnerable Software and Affected Versions: ThemeLooks Enter Addons versions n/a through 2.1.9 Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means an attacker can inject malicious...

WordPress plugin GS Coaches has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin “Interactive UK Map” has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

WordPress plugin WPKoi Templates for Elementor: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...