CVE-2024-51612

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designerken Reftagger Shortcode reftagger-shortcode allows Stored XSS.This issue affects Reftagger Shortcode: from n/a through = 1.1...

CVE-2024-51609

CVE-2024-51609 describes a stored XSS in the WordPress plugin Emoji Shortcode (versions n/a–1.0.0) due to improper input neutralization during web page generation. Multiple connected sources confirm the vulnerability in Emoji Shortcode, with advisories indicating the issue affects versions up to ...

CVE-2024-51612

CVE-2024-51612 : Stored XSS in WordPress plugin “Reftagger Shortcode” (versions n/a–1.1) due to improper input neutralization during web page generation. Public docs confirm this vulnerability affects the Reftagger Shortcode plugin up to v1.1; exploitation details are not provided, and no patch/v...

CVE-2024-51614

CVE-2024-51614 affects WordPress plugin “Aajoda Testimonials” (

CVE-2024-51706

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Upeksha Wisidagama UW Freelancer uw-freelancer allows Reflected XSS.This issue affects UW Freelancer: from n/a through = 0.1...

CVE-2024-51697

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Doofinder Doofinder doofinder allows Reflected XSS.This issue affects Doofinder: from n/a through = 0.5.4...

CVE-2024-51693

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in labdav Search order by product SKU for WooCommerce search-order-by-product-sku-for-woocommerce allows Reflected XSS.This issue affects Search order by product SKU for WooCommerce: from n/a through ...

CVE-2024-51663

CVE-2024-51663 is an XSS vulnerability in the WordPress plugin Bricksable for Bricks Builder (affected: Bricksable for Bricks Builder,

CVE-2024-51676

CVE-2024-51676 is a Cross-Site Scripting (DOM-based XSS) vulnerability in the WordPress plugin Delisho (dr-widgets-blocks). It affects Delisho versions up to and including 1.0.6 and arises from improper input neutralization during web page generation. The issue has a CVSS v3.1 base score of 6.5 (...

CVE-2024-51696

CVE-2024-51696 is a reflected XSS in Content Syndication Toolkit Reader for WordPress, affecting versions up to 1.5. Root cause: improper input neutralization during web page generation. This entry notes Reflected XSS, but the connected documents do not provide an official patch/version that fixe...

CVE-2024-51699

CVE-2024-51699 is a reflected XSS in the Buooy Sticky Header WordPress plugin (Improper Neutralization of Input During Web Page Generation). Affected: Buooy Sticky Header versions up to 0.5.2 (and earlier/not explicitly fixed by a public patch in the available documents). Impact is reflected XSS,...

CVE-2024-51713

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TRe Technology And Research S.r.l. HQ60 Fidelity Card hq60-fidelity-card allows Reflected XSS.This issue affects HQ60 Fidelity Card: from n/a through = 1.8...

CVE-2024-51708

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Narnoo Narnoo Commerce Manager narnoo-commerce-manager allows Reflected XSS.This issue affects Narnoo Commerce Manager: from n/a through = 1.6.0...

CVE-2024-51703

CVE-2024-51703 represents a reflected XSS in WordPress plugin WP-Basics (Genethick WP-Basics). Root cause: improper neutralization of input during web page generation. Affects WP-Basics up to version 2.0; CVSS 3.1/7.1 (HIGH). Connected Red Hat advisory confirms the issue; no public exploit or rem...

CVE-2024-51708 WordPress Narnoo Commerce Manager plugin <= 1.6.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Narnoo Narnoo Commerce Manager narnoo-commerce-manager allows Reflected XSS.This issue affects Narnoo Commerce Manager: from n/a through = 1.6.0...

CVE-2024-51708 WordPress Narnoo Commerce Manager plugin <= 1.6.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Narnoo Narnoo Commerce Manager narnoo-commerce-manager allows Reflected XSS.This issue affects Narnoo Commerce Manager: from n/a through = 1.6.0...

CVE-2024-51710

CVE-2024-51710 affects Minerva Infotech’s Responsive Data Table (WordPress plugin). It is a Reflected XSS vulnerability caused by improper input neutralization during web page generation, with CVSS v3.1 base score 7.1 (HIGH). Impact is listed as LOW for confidentiality, integrity, and availabilit...

CVE-2024-51712 WordPress Jigoshop plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Visser Jigoshop – Store Toolkit jigoshop-store-toolkit allows Reflected XSS.This issue affects Jigoshop – Store Toolkit: from n/a through = 1.4.0...

CVE-2024-51714

CVE-2024-51714 describes a reflected Cross-Site Scripting vulnerability in the WordPress plugin/theme component “User Password Reset.” The issue arises from improper neutralization of user-supplied input during web page generation, allowing an attacker to craft a URL that, when visited by a victi...

CVE-2024-51718

CVE-2024-51718 is a Reflected XSS in Simple Modal (Improp­er Input Neutralization during Web Page Generation). Affected: Simple Modal versions up to 0.3.3. Root cause: improper neutralization of user input leading to script execution when pages generate content that incorporates untrusted input. ...