CVE-2024-34422

CVE-2024-34422 describes a Stored XSS in the WordPress plugin Viet Affiliate Link. The Initial Description notes an input-neutralization issue during web page generation that enables stored cross-site scripting. Connected documents corroborate the issue as affecting Viet Affiliate Link versions u...

CVE-2024-34423 WordPress Forty Four – 404 Plugin for WordPress plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in phpbits Forty Four – 404 Plugin for WordPress allows Stored XSS.This issue affects Forty Four – 404 Plugin for WordPress: from n/a through 1.4...

CVE-2024-34424 WordPress Featured Content Gallery plugin <= 3.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iePlexus Featured Content Gallery allows Stored XSS.This issue affects Featured Content Gallery: from n/a through 3.2.0...

CVE-2024-34425

CVE-2024-34425 is a Stored XSS in the QuickieBar WordPress plugin (Phil Baylog QuickieBar). Affected: QuickieBar versions up to and including 1.8.4. Root cause described as improper neutralization during web page generation; no public details on exploitation or fixes are provided in the connected...

CVE-2024-34426

CVE-2024-34426 refers to a Stored XSS in the Brozzme Scroll Top WordPress plugin (Brozzme Scroll Top) affecting versions up to 1.8.5. The connected data indicates this is an authenticated, admin‑level vulnerability with the issue being present and currently Unpatched; no vendor patch/version reme...

CVE-2024-34428 WordPress AWSOM News Announcement plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Harknell AWSOM News Announcement allows Stored XSS.This issue affects AWSOM News Announcement: from n/a through 1.6.0...

CVE-2024-34430 WordPress TT Custom Post Type Creator plugin <=1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rashed Latif TT Custom Post Type Creator allows Stored XSS.This issue affects TT Custom Post Type Creator: from n/a through 1.0...

CVE-2024-34430

CVE-2024-34430 concerns the TT Custom Post Type Creator WordPress plugin (

CVE-2024-34431

CVE-2024-34431 corresponds to a Reflected XSS in the WordPress plugin WP etracker , affecting versions up to 1.0.2. The connected sources corroborate a cross‑site scripting vulnerability in WP etracker, with no public exploit data in the provided documents. The Wordfence listing notes the patch s...

CVE-2024-34436 WordPress SKT Addons for Elementor plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SKT Themes SKT Addons for Elementor allows Stored XSS.This issue affects SKT Addons for Elementor: from n/a through 1.8...

CVE-2024-34441

CVE-2024-34441 concerns the Easy Affiliate Links WordPress plugin. Connected documents confirm a stored cross-site scripting (XSS) vulnerability caused by improper neutralization of input during web page generation, affecting Easy Affiliate Links versions from unknown/na up to 3.7.2. Wordfence en...

CVE-2024-34445

CVE-2024-34445: Stored Cross-Site Scripting in SKT Addons for Elementor (SKT Addons for Elementor) affecting versions n/a–1.8. Red Hat entry confirms the same issue. The Wordfence page notes Patch Status: Patched, indicating a fix is available in newer releases. If affected, upgrade to the patche...

CVE-2024-34445 WordPress SKT Addons for Elementor plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SKT Themes SKT Addons for Elementor allows Stored XSS.This issue affects SKT Addons for Elementor: from n/a through 1.8...

PT-2024-25882 · Unknown · Corona Virus (Covid-19) Banner & Live Data

Name of the Vulnerable Software and Affected Versions: Corona Virus COVID-19 Banner & Live Data versions 1.8.0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the...

CVE-2024-34561

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative interactive media 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin allows Stored XSS.This issue affects 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook...

CVE-2024-34546

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Habibur Rahman Sticky Social Link sticky-social-link allows DOM-Based XSS.This issue affects Sticky Social Link: from n/a through = 2.0.1...

CVE-2024-34558

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 WOLF allows Stored XSS.This issue affects WOLF: from n/a through 1.0.8.2...

CVE-2024-34547

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor alam Magical Addons For Elementor allows Stored XSS.This issue affects Magical Addons For Elementor: from n/a through 1.1.34...

CVE-2024-34548

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themesgrove WidgetKit allows Stored XSS.This issue affects WidgetKit: from n/a through 2.4.8...

CVE-2024-34414

CVE-2024-34414 affects the WordPress raindrops theme (Up to 1.600). The issue is a Stored XSS caused by improper neutralization during web page generation. The CVE notes MEDIUM risk (CVSS v3.1: 6.5) with Low confidentiality/integrity/availability impact; exploitation status is not shown in public...