CVE-2024-44040

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in plainware ShiftController Employee Shift Scheduling shiftcontroller allows Stored XSS.This issue affects ShiftController Employee Shift Scheduling: from n/a through = 4.9.64...

CVE-2024-44029

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in David Garlitz viala allows Reflected XSS.This issue affects viala: from n/a through 1.3.1...

CVE-2024-44026

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Charity Addon for Elementor charity-addon-for-elementor allows Stored XSS.This issue affects Charity Addon for Elementor: from n/a through = 1.3.0...

CVE-2024-44010

CVE-2024-44010 affects WordPress Full Frame theme (

CVE-2024-44026

CVE-2024-44026 : Charity Addon for Elementor (WordPress)

CVE-2024-45252 Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...

CVE-2024-45249 Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...

CVE-2024-44035

CVE-2024-44035 affects Gum Elementor Addon (WordPress plugin) versions

CVE-2024-47313

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in catchthemes Catch Base catch-base allows Stored XSS.This issue affects Catch Base: from n/a through = 3.4.6...

CVE-2024-47307

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Essential Plugin Meta slider and carousel with lightbox meta-slider-and-carousel-with-lightbox allows Stored XSS.This issue affects Meta slider and carousel with lightbox: from n/a through = 2.0.1...

CVE-2024-47298

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through = 5.1.1...

CVE-2024-44042

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Fahad Mahmood WP Datepicker allows Stored XSS.This issue affects WP Datepicker: from n/a through 2.1.1...

CVE-2024-44045

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kevon Adonis WP Abstracts wp-abstracts-manuscripts-manager allows Stored XSS.This issue affects WP Abstracts: from n/a through = 2.6.5...

CVE-2024-44041

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Northern Beaches Websites IdeaPush ideapush allows Stored XSS.This issue affects IdeaPush: from n/a through = 8.66...

CVE-2024-44036

CVE-2024-44036 is a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Kodex Posts likes (versions

CVE-2024-44037

CVE-2024-44037 is a stored XSS in the WordPress plugin Multipurpose Ticket Booking Manager (bus-booking-manager / WpTicketly) for versions up to and including 4.2.2 . The vulnerability arises from improper input neutralization during web page generation, enabling stored cross-site scripting via a...

CVE-2024-44039

CVE-2024-44039 affects WordPress WP Travel – Ultimate Travel Booking System, Tour Management Engine plugin versions up to 9.3.1. Root cause: Improper neutralization of input during web page generation, enabling Stored XSS. Impact is stored cross-site scripting in WP Travel pages (low to moderate ...

CVE-2024-44040

CVE-2024-44040 : WordPress plugin ShiftController Employee Shift Scheduling contains a stored XSS due to improper input neutralization during web page generation. Affected plugin versions:

CVE-2024-44043

CVE-2024-44043 is a stored XSS in WordPress plugin Photo Gallery by 10Web up to version 1.8.27 . The issue arises from improper input handling during web page generation. Patch data from Patchstack indicates the fix is in version 1.8.28 ; the vulnerability has a low patch priority and is consider...

CVE-2024-47297

CVE-2024-47297 : WordPress CP Polls plugin versions up to 1.0.74 are vulnerable to a reflected XSS due to improper input neutralization during web page generation. The CVSS v3.1 base score is 7.1 (HIGH). Patch information from Patchstack indicates the vulnerability is fixed in CP Polls 1.0.75. Af...