9175 matches found
CVE-2024-32557
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Exclusive Addons Exclusive Addons Elementor allows Stored XSS.This issue affects Exclusive Addons Elementor: from n/a through 2.6.9.2...
CVE-2024-32557
CVE-2024-32557 is the Stored XSS vulnerability in the WordPress plugin Exclusive Addons for Elementor, affecting all versions up to 2.6.9.2. Red Hat context confirms the issue arises from insufficient input sanitization and output escaping in the Post Grid Widget, enabling authenticated attackers...
CVE-2024-32145
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PineWise WP Google Analytics Events allows Reflected XSS.This issue affects WP Google Analytics Events: from n/a through 2.8.0...
CVE-2024-32428
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moss Web Works MWW Disclaimer Buttons allows Stored XSS.This issue affects MWW Disclaimer Buttons: from n/a through 3.0.2...
CVE-2024-32429
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPChill Remove Footer Credit allows Stored XSS.This issue affects Remove Footer Credit: from n/a through 1.0.13...
CVE-2024-32429
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPChill Remove Footer Credit allows Stored XSS.This issue affects Remove Footer Credit: from n/a through 1.0.13...
CVE-2024-32079
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Dempfle Advanced iFrame allows Stored XSS.This issue affects Advanced iFrame: from n/a through 2024.2...
CVE-2024-32140
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Libsyn Libsyn Publisher Hub allows Stored XSS.This issue affects Libsyn Publisher Hub: from n/a through 1.4.4...
CVE-2024-32079 WordPress Advanced iFrame plugin <= 2024.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Dempfle Advanced iFrame allows Stored XSS.This issue affects Advanced iFrame: from n/a through 2024.2...
CVE-2024-32079
CVE-2024-32079 affects the Advanced iFrame WordPress plugin. The Connected Wordfence entry specifies an authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode in Advanced iFrame (
CVE-2024-32133
CVE-2024-32133 is a reflected XSS in the EZ Form Calculator WordPress plugin (EZ Form Calculator) affecting versions up to 2.14.0.3. The vulnerability is documented as not patched in the connected material; no mitigation or patches are described within the provided documents.
CVE-2024-32140
CVE-2024-32140 : Stored Cross-Site Scripting in Libsyn Publisher Hub (improper neutralization of input during web page generation). Affected: Libsyn Publisher Hub up to version 1.4.4. The provided documents do not specify an available patch/mitigation or explicit exploitation details.
CVE-2024-32140 WordPress Libsyn Publisher Hub plugin <= 1.4.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in libsyn Libsyn Publisher Hub libsyn-podcasting.This issue affects Libsyn Publisher Hub: from n/a through = 1.4.4...
CVE-2024-32147
CVE-2024-32147 affects the Form Plugin Team – GhozyLab Easy Contact Form Lite (WordPress plugin). The vulnerability is a Stored Cross‑Site Scripting (XSS) caused by improper neutralization of input during web page generation. Affected versions are from n/a up to 1.1.23. Public details in provided...
CVE-2024-32149
CVE-2024-32149: Affected software is the Jobs for WordPress plugin (WordPress), version n/a up to 2.7.5. Root cause is improper neutralization of input during web page generation, enabling a Reflected XSS. Impact per CVSS: Confidentiality and Integrity are Low; Availability unaffected; user inter...
CVE-2024-32149 WordPress Jobs for WordPress plugin <= 2.7.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BlueGlass Jobs for WordPress allows Reflected XSS.This issue affects Jobs for WordPress: from n/a through 2.7.5...
CVE-2024-32428
CVE-2024-32428 affects the WordPress plugin MWW Disclaimer Buttons (MWW Disclaimer Buttons) up to version 3.0.2, with a Stored XSS due to improper input neutralization during web page generation. Root cause: insufficient sanitization leading to script execution in the context of the affected page...
CVE-2024-32429
CVE-2024-32429 refers to an authenticated, stored cross-site scripting vulnerability in the WordPress plugin Remove Footer Credit (affected: