9197 matches found
CVE-2024-35687
CVE-2024-35687 is a Reflected XSS in the WordPress plugin Link Library (link-library) affecting versions up to 7.6.3. The issue arises from improper input neutralization during web page generation, enabling attackers to inject scripts via crafted input. Reliably, patches have been released; remed...
CVE-2024-35687 WordPress Link Library plugin <= 7.6.3 - Reflected Cross-Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library link-library allows Reflected XSS.This issue affects Link Library: from n/a through 7.6.3...
CVE-2024-35688 WordPress Master Addons for Elementor plugin <= 2.0.5.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through 2.0.5.9...
CVE-2024-35688
WordPress Master Addons for Elementor plugin ( 2.0.5.9, specifically fixed in 2.0.6.0. Patch sources (Patchstack) note low exploit likelihood; no exploitation details provided in the document set. References include Patchstack entries indicating vulnerability and fix. Monitor for updates as detai...
CVE-2024-35693 WordPress 12 Step Meeting List plugin <= 3.14.33 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list.This issue affects 12 Step Meeting List: from n/a through = 3.14.33...
CVE-2024-35693
CVE-2024-35693 affects WordPress plugin “12 Step Meeting List” (versions
CVE-2024-35693 WordPress 12 Step Meeting List plugin <= 3.14.33 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list.This issue affects 12 Step Meeting List: from n/a through = 3.14.33...
CVE-2024-35694
CVE-2024-35694 affects WPMobile.App up to version 11.41 with a reflected XSS due to improper input neutralization during web page generation. A fix is available in version 11.42 and later; update to the latest release to mitigate. Exploitation details are not publicly described in the initial doc...
CVE-2024-35694 WordPress WPMobile.App plugin <= 11.41 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPMobile.App allows Reflected XSS.This issue affects WPMobile.App: from n/a through 11.41...
CVE-2024-35694 WordPress WPMobile.App plugin <= 11.41 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Amauri WPMobile.App wpappninja.This issue affects WPMobile.App: from n/a through = 11.41...
CVE-2024-35695 WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Fahad Mahmood WP Docs allows Stored XSS.This issue affects WP Docs: from n/a through 2.1.3...
CVE-2024-35695 WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Fahad Mahmood WP Docs allows Stored XSS.This issue affects WP Docs: from n/a through 2.1.3...
CVE-2024-35695
CVE-2024-35695 is a Stored XSS vulnerability affecting WP Docs plugin for WordPress (affected: WP Docs
CVE-2024-35696
CVE-2024-35696 affects the WP Docs WordPress plugin. The vulnerability is a Cross-Site Scripting issue (Reflected XSS) in WP Docs, with exploitation possible via input reflected during web page generation. Impact is user-side: potential credential/session data exposure through injected scripts. A...
CVE-2024-35697
CVE-2024-35697 (Eduma WordPress theme) is a reflected XSS in Eduma, affecting versions n/a–5.4.7. The issue is a result of improper input neutralization during web page generation, enabling reflected XSS via user-supplied input. The CVE entry notes a patch status of Patched for Eduma
CVE-2024-35697 WordPress Eduma theme <= 5.4.7 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ThimPress Eduma allows Reflected XSS.This issue affects Eduma: from n/a through 5.4.7...
CVE-2024-35698 WordPress YITH WooCommerce Tab Manager plugin <= 1.35.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in YITH YITH WooCommerce Tab Manager allows Stored XSS.This issue affects YITH WooCommerce Tab Manager: from n/a through 1.35.0...
CVE-2024-35698
CVE-2024-35698 is a Cross-Site Scripting vulnerability in YITH WooCommerce Tab Manager (yith-woocommerce-tab-manager) that affects versions n/a through
CVE-2024-35699 WordPress HT Feed plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HasThemes HT Feed allows Stored XSS.This issue affects HT Feed: from n/a through 1.2.8...
CVE-2024-35699 WordPress HT Feed plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HasThemes HT Feed allows Stored XSS.This issue affects HT Feed: from n/a through 1.2.8...