CVE-2024-50517

CVE-2024-50517 affects WordPress ID-SK Toolkit plugin (ID-SK Toolkit) up to version 1.7.2, with a Stored XSS due to improper input neutralization during page generation. Public details across connected sources confirm the vulnerability and affected range (1.7.2 and earlier); no fix version is pro...

CVE-2024-50522 WordPress WeChat Subscribers Lite plugin <= 1.6.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in redyyu WeChat Subscribers Lite wechat-subscribers-lite allows Reflected XSS.This issue affects WeChat Subscribers Lite : from n/a through = 1.6.6...

CVE-2024-50536

CVE-2024-50536 concerns the WordPress WordPress GDReseller plugin, affected versions

CVE-2024-50552

CVE-2024-50552: WordPress Hover Video Preview plugin versions 1.0.2 and earlier are affected by a Stored XSS due to improper neutralization of input during web page generation. The connected sources consistently describe this as a Stored XSS vulnerability in Hover Video Preview (CVE-2024-50552); ...

CVE-2024-50551

CVE-2024-50551 corresponds to a Stored XSS in WordPress plugin EndomondoWP (versions 0.1.1 and earlier). The vulnerability is due to improper neutralization of input during web page generation. Affected software: EndomondoWP

CVE-2024-50556

CVE-2024-50556 affects WordPress WM Zoom plugin versions

CVE-2024-51794

CVE-2024-51794 is a Stored XSS vulnerability in WordPress Storely theme (NotFound Storely) due to improper input neutralization during page generation. Affected versions are reported as from n/a through 14.7. The Connected documents corroborate Cross-Site Scripting via input handling and list Sto...

CVE-2024-51797 WordPress Ultimate Accordion plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md. Shiddikur Rahman Ultimate Accordion ultimate-accordion allows DOM-Based XSS.This issue affects Ultimate Accordion: from n/a through = 1.0...

CVE-2024-51799

CVE-2024-51799 affects Bg Patriarchia BU (WordPress plugin) up to version 2.2.3, with a DOM-based Cross-Site Scripting vulnerability caused by improper input neutralization during web page generation. This can enable XSS on pages rendered by Bg Patriarchia BU. Evidence from multiple sources confi...

CVE-2024-51802

CVE-2024-51802 is a DOM-based XSS vulnerability in the Bread & Butter WordPress plugin (Bread & Butter) affecting versions up to 7.4.857. The issue arises from improper neutralization of input during Web Page Generation, enabling cross-site scripting. Multiple connected sources (e.g., Red Hat adv...

CVE-2024-51807

CVE-2024-51807 is a Stored Cross-Site Scripting vulnerability in the WordPress plugin AgendaPress – Easily Publish Meeting Agendas and Programs on WordPress, affecting versions from n/a up to 1.0.8. The vulnerability is characterized by improper input neutralization during page generation (XSS). ...

CVE-2024-51808

CVE-2024-51808 describes a stored cross-site scripting (XSS) vulnerability in the WordPress plugin “codeSnips.” The issue arises from improper neutralization of input during web page generation, allowing injected scripts to be stored and potentially executed when other users load affected pages. ...

CVE-2024-51810

CVE-2024-51810 is a Stored XSS in WordPress plugin Lewe Bootstrap Visuals (up to version 2.2.2) caused by improper neutralization of input during web page generation. The vulnerability affects Lewe Bootstrap Visuals and can allow malicious scripts to be stored and later executed in a user’s brows...

CVE-2024-51819 WordPress Tigris Flexplatform plugin <=1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tigrisflexplatform Tigris Flexplatform tigris-flexplatform allows Stored XSS.This issue affects Tigris Flexplatform: from n/a through = 1.0.2...

CVE-2024-51823

CVE-2024-51823 concerns the WordPress plugin Add Ribbon Shortcode (vulnerable up to 1.0.1) and describes a DOM‑Based XSS caused by improper input neutralization during web page generation. The description in the initial document states Cross-site Scripting for Add Ribbon Shortcode and lists affec...

CVE-2024-51825

CVE-2024-51825 is a WordPress Alert Me! plugin vulnerability (

CVE-2024-51830

CVE-2024-51830 is a stored XSS vulnerability in Fazilatunnesa News Ticker (WordPress News Ticker plugin). Exploitation requires an authenticated user (Contributor+); input is not properly neutralized during web page generation, enabling stored cross-site scripting. Affected versions are News Tick...

CVE-2024-51839

CVE-2024-51839 – Utech Spinning Earth WordPress plugin exhibits a DOM-based XSS due to improper input neutralization during web page generation. Affected: Utech Spinning Earth versions up to 1.2 (and earlier). Public details across sources consistently describe the issue as Cross-Site Scripting w...

CVE-2024-51853 WordPress Faltu Testimonial Rotator plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alberuni Azad. Faltu Testimonial Rotator faltu-testimonial-rotator allows DOM-Based XSS.This issue affects Faltu Testimonial Rotator: from n/a through = 1.0.0...

CVE-2024-51855

Productineer Redirecter is affected by DOM-Based XSS due to improper neutralization of input during web page generation. CVE-2024-51855 applies to Redirecter versions n/a through 1.0. Root cause: inadequate input sanitization in page rendering. Impact is DOM-based XSS as described in connected Re...