CVE-2024-51856

CVE-2024-51856 is an XSS vulnerability in the WP Moose Elementor Kit (WordPress plugin) where improper input handling during web page generation leads to a DOM-based cross-site scripting issue. Public sources concur this affects Moose Elementor Kit up to version 1.0.0 (and earlier), with exploita...

CVE-2024-51858

CVE-2024-51858 is a Stored XSS vulnerability in Umar Social Locker WordPress plugin (

CVE-2024-51860

CVE-2024-51860 is a stored cross-site scripting (XSS) vulnerability in the DuoGeek Custom Dashboard Widget for WordPress. The issue arises from improper neutralization of input during web page generation, allowing stored malicious input to be reflected in the widget’s output. Affected: Custom Das...

CVE-2024-51865

CVE-2024-51865 : The WordPress plugin Simple Social Share Block is affected by a Stored XSS due to improper input neutralization during page generation. Affected range is from a non-specified start through version 1.0.0. Public sources (Red Hat, CVE listings, and vulnerability databases) corrobor...

CVE-2024-51870

CVE-2024-51870 corresponds to a stored cross‑site scripting (XSS) vulnerability in the WordPress plugin “Ultimate Flipbox Addon for Elementor.” Affected: Ultimate Flipbox Addon for Elementor versions up to 1.0.4 (auth required). Root cause: improper neutralization of user input during web page ge...

CVE-2024-51869

CVE-2024-51869 is a stored XSS in the Gutenium Blocks WordPress plugin (vulnerable

CVE-2024-51873

CVE-2024-51873 is a DOM-based XSS vulnerability in the matorel Multi-day Booking Calendar WordPress plugin, affecting versions up to 1.0.1. The issue arises from improper input handling during web page generation, enabling cross-site scripting. Publicly disclosed details from multiple sources con...

CVE-2024-51878

CVE-2024-51878 affects AchillesTheme-shortcodes (WordPress plugin). Public details describe an improper input neutralization during web page generation leading to DOM-based XSS in versions up to 0.1. No patch information is provided in the connected documents; remediation status is not specified....

CVE-2024-51887

CVE-2024-51887 – NV Slider (WordPress plugin) suffers Stored XSS due to improper input neutralization during page generation. Affected: NV Slider versions 1.6 and earlier. Root cause: improper handling of user-supplied input in web page rendering. Impact: stored cross-site scripting possibility o...

CVE-2024-51886 WordPress Posts Filter plugin <= 1.3.1 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Takashi Matsuyama Posts Filter posts-filter allows Stored XSS.This issue affects Posts Filter: from n/a through = 1.3.1...

CVE-2024-51890

CVE-2024-51890 is a stored XSS vulnerability affecting the Geoportail Shortcode plugin for WordPress, with affected versions from n/a through 2.4.4. The issue is described as Improper Neutralization of Input During Web Page Generation. Public sources in connected documents confirm Geoportail Shor...

CVE-2024-51892

CVE-2024-51892 describes a Stored XSS in the WordPress plugin Sell Media File with Stripe (naa986) affecting versions up to 1.0.6. The root cause is improper input neutralization during web page generation . Affected software is listed as from n/a through 1.0.6. Remediation recommended: update to...

CVE-2024-51895 WordPress Minical Hotel Booking Plugin plugin <= 1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pankaj9296 Minical Hotel Booking Plugin minical allows Stored XSS.This issue affects Minical Hotel Booking Plugin: from n/a through = 1.0.2...

CVE-2024-51898 WordPress Semantic Shortcode plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sachin8600 Semantic Shortcode semantic-shortcode allows Stored XSS.This issue affects Semantic Shortcode: from n/a through = 1.0.1...

CVE-2024-51899

The CVE-2024-51899 entry covers the WordPress plugin Simple Pricing Table (versions

CVE-2024-51907

CVE-2024-51907: The WP Virtual Room Configurator plugin (codemenschen) has a Stored XSS in versions 1.0.0 and earlier due to improper input neutralization during page generation. Public sources corroborate a WordPress plugin vulnerability affecting WP Virtual Room Configurator up to 1.0.0 with re...

CVE-2024-51908

CVE-2024-51908 is a DOM-based XSS in the WordPress plugin Adventure Bucket List (WordPress plugin family). The vulnerability arises from improper input neutralization during page generation, enabling DOM-based cross-site scripting. Affected versions are reported as “from n/a through 1.0.9” for Ad...

CVE-2024-51917

CVE-2024-51917 is a stored XSS in the WordPress plugin Multiple Votes in one page (versions 1.0.0–1.0.4). The issue arises from Improper Neutralization of Input During Web Page Generation, allowing user-supplied input to be stored and subsequently rendered on pages, enabling stored Cross-Site Scr...

CVE-2024-51920

CVE-2024-51920 affects Map Store Locator (WordPress plugin) versions 1.2.1 and earlier. Root cause: improper input neutralization during web page generation, enabling DOM-Based XSS. Impact: DOM-based cross-site scripting as described; no exploitation details provided in the sources. Remediation: ...

CVE-2024-51921 WordPress scrollup plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in midori scrollup scrollup allows DOM-Based XSS.This issue affects scrollup: from n/a through = 1.1...