CVE-2024-32576

The CVE-2024-32576 entry concerns the WordPress plugin BA Book Everything (WordPress Plugin) with versions ≤ 1.6.8. The vulnerability is a Cross-Site Scripting (XSS) flaw caused by improper neutralization during web page generation, resulting in stored XSS. Affected component: the WordPress plugi...

CVE-2024-32577

CVE-2024-32577 – CBX Bookmark & Favorite (cbxwpbookmark) Stored XSS in the WordPress CBXWPBookmark plugin. Affects CBX Bookmark & Favorite:

CVE-2024-32579 WordPress Restaurant Menu – Food Ordering System – Table Reservation plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GloriaFood Restaurant Menu – Food Ordering System – Table Reservation allows Stored XSS.This issue affects Restaurant Menu – Food Ordering System – Table Reservation: from n/a through 2.4.1...

CVE-2024-32580

CVE-2024-32580 is a real issue in Master Slider (WordPress) up to version 3.9.8, caused by improper neutralization of input during web page generation, leading to a stored XSS vulnerability. The flaw allows attacker-supplied input to be stored and later rendered in pages, potentially affecting si...

CVE-2024-32580 WordPress Master Slider plugin <= 3.9.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Averta Master Slider allows Stored XSS.This issue affects Master Slider: from n/a through 3.9.8...

CVE-2024-32581

CVE-2024-32581 is a Stored XSS in Mortgage Calculators WP plugin affecting versions up to 1.56. Root cause: Improper input neutralization during web page generation. Impact (per provided metrics): low to moderate across confidentiality, integrity, availability; overall CVSS 3.1 base score 6.5 (ME...

CVE-2024-32582

CVE-2024-32582 is a Stored XSS vulnerability in the WordPress plugin Debug Log Manager (vulnerable from n/a up to 2.3.1). The issue arises from improper input neutralization during web page generation, enabling malicious scripts to be stored and executed in a user’s browser. The CVSS score in pro...

CVE-2024-32583 WordPress Photo Gallery by 10Web plugin <= 1.8.21 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Photo Gallery Team Photo Gallery by 10Web allows Reflected XSS.This issue affects Photo Gallery by 10Web: from n/a through 1.8.21...

CVE-2024-32583

CVE-2024-32583 concerns WordPress Photo Gallery by 10Web plugin. A Reflected Cross-Site Scripting (XSS) vulnerability exists in versions up to and including 1.8.21, allowing unauthenticated attackers to inject scripts via input that is reflected in page generation. The issue affects the plugin’s ...

CVE-2024-32596

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eric-Oliver Mächler DSGVO Youtube allows Stored XSS.This issue affects DSGVO Youtube: from n/a through 1.4.5...

CVE-2024-32592

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VoidCoders, innovs Void Elementor WHMCS Elements For Elementor Page Builder allows Stored XSS.This issue affects Void Elementor WHMCS Elements For Elementor Page Builder: from n/a through 2.0...

CVE-2024-32587

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EnvialoSimple EnvíaloSimple allows Reflected XSS.This issue affects EnvíaloSimple: from n/a through 2.2...

CVE-2024-32584

Technical details about CVE-2024-32584 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-32587

CVE-2024-32587 affects EnvialoSimple EnvíaloSimple (WordPress plugin) with a Reflected XSS in the plugin’s web page generation. Affected range: EnvíaloSimple from n/a through 2.2; connected Red Hat/ENISA entries confirm the cross-site scripting issue. The Wordfence vulnerability record shows a PA...

CVE-2024-32588

CVE-2024-32588 : Reflected XSS in LearnPress Export Import (WordPress plugin) affecting LearnPress Export Import versions

CVE-2024-32591 WordPress Backend Designer plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniele De Rosa Backend Designer allows Stored XSS.This issue affects Backend Designer: from n/a through 1.3...

CVE-2024-32592 WordPress Void Elementor WHMCS Elements For Elementor Page Builder plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VoidCoders, innovs Void Elementor WHMCS Elements For Elementor Page Builder allows Stored XSS.This issue affects Void Elementor WHMCS Elements For Elementor Page Builder: from n/a through 2.0...

CVE-2024-32593

CVE-2024-32593 affects the WordPress plugin WPBITS Addons For Elementor Page Builder (versions 1.3.4.2 and earlier). The vulnerability is Stored XSS arising from improper neutralization during web page generation. Impact is limited to confidentiality/integrity (low) with no availability impact pe...

CVE-2024-32594

CVE-2024-32594 affects the Attesa Extra WordPress plugin. The issue is a Stored XSS caused by improper input neutralization during web page generation. It concerns Attesa Extra versions up to and including 1.3.9. A patched fix is available according to the connected Wordfence entry (Patch Status:...

CVE-2024-32595

CVE-2024-32595 is a Reflected XSS affecting WP Helper Premium for WordPress (pre-4.6.0). Affected component: WP Helper Premium plugin; root cause: improper input neutralization during web page generation leading to reflected script execution. Impact: low to high depending on context (per CVSS v3....