CVE-2024-35733

CVE-2024-35733 is a Reflected Cross-Site Scripting vulnerability in RLDD Auto Coupons for WooCommerce (Auto Coupons for WooCommerce) that affects versions up to and including 3.0.14. The issue arises from improper input neutralization during web page generation. Public references indicate exploit...

CVE-2024-35734 WordPress WP Time Slots Booking Form plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CodePeople WP Time Slots Booking Form allows Stored XSS.This issue affects WP Time Slots Booking Form: from n/a through 1.2.10...

CVE-2024-35734 WordPress WP Time Slots Booking Form plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CodePeople WP Time Slots Booking Form allows Stored XSS.This issue affects WP Time Slots Booking Form: from n/a through 1.2.10...

CVE-2024-35737 WordPress WP Visitors Tracker plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Loopus WP Visitors Tracker allows Reflected XSS.This issue affects WP Visitors Tracker: from n/a through 2.3...

CVE-2024-35737

CVE-2024-35737 is a Reflected XSS in the WP Visitors Tracker WordPress plugin. Affected software is listed as WP Visitors Tracker (from n/a through 2.3). The provided documents identify the issue type and affected version range but do not provide details on root cause beyond “Improper Neutralizat...

CVE-2024-35738 WordPress Kognetiks Chatbot for WordPress plugin <= 1.9.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kognetiks Kognetiks Chatbot for WordPress allows Stored XSS.This issue affects Kognetiks Chatbot for WordPress: from n/a through 1.9.8...

CVE-2024-35740 WordPress Pixgraphy theme <= 1.3.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Theme Freesia Pixgraphy allows Stored XSS.This issue affects Pixgraphy: from n/a through 1.3.8...

CVE-2024-35740

CVE-2024-35740 is a stored XSS in the Pixgraphy WordPress theme (Pixgraphy). The vulnerability affects Pixgraphy versions up to 1.3.8 and is described as an input-neutralization issue during web page generation. The connected documents confirm the existence of the vulnerability and the affected v...

CVE-2024-35751

Technical details for CVE-2024-35751 ( Woody code snippets plugin, affected version range, XSS impact, and fixes) are not provided in the supplied Connected Documents. Monitor for updates.

CVE-2024-35752

CVE-2024-35752 is a Stored XSS in the Stellissimo Text Box used with Enea Overclokk Stellissimo Text Box. The description notes Improper Neutralization of Input During Web Page Generation and indicates the flaw affects Stellissimo Text Box versions up to 1.1.4 (and possibly earlier “n/a through 1...

CVE-2024-35752 WordPress Stellissimo Text Box plugin 1.1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Enea Overclokk Stellissimo Text Box allows Stored XSS.This issue affects Stellissimo Text Box: from n/a through 1.1.4...

CVE-2024-35756

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CeiKay Tooltip CK tooltip-ck allows Stored XSS.This issue affects Tooltip CK: from n/a through 2.2.15...

CVE-2024-35755

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in El tiempo Weather Widget Pro allows Stored XSS.This issue affects Weather Widget Pro: from n/a through 1.1.40...

CVE-2024-35753

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in TemplatesNext TemplatesNext OnePager allows Stored XSS.This issue affects TemplatesNext OnePager: from n/a through 1.3.3...

CVE-2024-35755

CVE-2024-35755 is an authenticated stored XSS in Weather Widget Pro for WordPress. Affected: Weather Widget Pro, versions up to 1.1.40. Root cause: Improper input neutralization during web page generation. Impact: Stored payloads could execute in pages viewed by users. Public patch status not det...

CVE-2024-35755 WordPress Weather Widget Pro plugin <= 1.1.40 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in El tiempo Weather Widget Pro allows Stored XSS.This issue affects Weather Widget Pro: from n/a through 1.1.40...

CVE-2024-35756 WordPress Tooltip CK plugin <= 2.2.15 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CeiKay Tooltip CK tooltip-ck allows Stored XSS.This issue affects Tooltip CK: from n/a through 2.2.15...

WordPress plugin YITH Custom Login cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Eduma security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin WP Visitors Tracker Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...