CVE-2024-29813

CVE-2024-29813 affects CartFlows Funnel Builder for WordPress, allowing Stored XSS via improper input handling during web page generation. Impact details are limited to Stored XSS with the affected range stated as n/a through 2.0.1; CVSS 3.1 base score 5.9. No fix version or remediation is provid...

CVE-2024-29814

CVE-2024-29814 is an Stored XSS in the Exchange Rates Widget. Affected: Exchange Rates Widget versions up to and including 1.4.0 (ranges shown as n/a through 1.4.0). CVSS shows Network access, Local privileges required (Low), User interaction required, with Low impacts to confidentiality, integri...

CVE-2024-29816

CVE-2024-29816 is a Stored XSS in the Woo Viet (HTAD) WordPress plugin. The vulnerability stems from improper input neutralization during web page generation, enabling an attacker to inject scripts that could be stored on the site. The initial Cisco/Red Hat entry confirms the issue and identifies...

CVE-2024-29818

CVE-2024-29818 – Stored XSS in WP Poll Maker (Poll Maker & Voting Plugin) for WordPress. Root cause: Improper neutralization of input during web page generation (Cross-site Scripting). Affected: WP Poll Maker versions from n/a through 3.1. The connected Red Hat entry repeats the same description;...

CVE-2024-29818 WordPress WP Poll Maker plugin <= 3.1 - Authenticated Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Poll Maker & Voting Plugin Team InfoTheme WP Poll Maker allows Stored XSS.This issue affects WP Poll Maker: from n/a through 3.1...

CVE-2024-30183 WordPress WPBakery Page Builder Addons by Livemesh plugin <= 3.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Livemesh Livemesh Addons for WPBakery Page Builder allows Stored XSS.This issue affects Livemesh Addons for WPBakery Page Builder: from n/a through 3.7...

CVE-2024-30182

CVE-2024-30182 describes a Stored XSS in HasThemes HT Mega for Elementor caused by improper neutralization of input during web page generation. Affected: HT Mega up to version 2.4.3. Public details in the provided documents specify the issue and affected range but do not include a confirmed patch...

CVE-2024-30181

Technical details for CVE-2024-30181 are not provided in the connected documents. Public specifics (affected product/version, exploit info, remediation) are not available here. Monitor official advisories and vendor updates for new information.

CVE-2024-29935

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SinaExtra Sina Extension for Elementor allows Stored XSS.This issue affects Sina Extension for Elementor: from n/a through 3.5.0...

CVE-2024-29936

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Blocksera Image Hover Effects – Elementor Addon allows Stored XSS.This issue affects Image Hover Effects – Elementor Addon: from n/a through 1.4...

CVE-2024-30177

CVE-2024-30177 affects Exclusive Addons for Elementor. It is a Stored XSS in the plugin’s web page generation due to improper input handling, affecting Exclusive Addons Elementor versions from n/a up to 2.6.8. The available documents specify the vulnerability type and affected range but do not pr...

CVE-2024-29934

CVE-2024-29934 is an XSS vulnerability in Piotnet Addons For Elementor. Connected sources confirm a Stored XSS condition during web page generation affecting Piotnet Addons For Elementor up to version 2.4.25 (range: n/a through 2.4.25). The vulnerability is triggered through input handling in the...

CVE-2024-29931

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPGMaps WP Go Maps wp-google-maps.This issue affects WP Go Maps: from n/a through = 9.0.29...

CVE-2024-29932

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter MDTF allows Stored XSS.This issue affects WordPress Meta Data and Taxonomies Filter MDTF: from n/a through 1.3.2...

CVE-2024-29930

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CurrencyRate.Today Crypto Converter Widget allows Stored XSS.This issue affects Crypto Converter Widget: from n/a through 1.8.4...

CVE-2024-29929

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WC Lovers WCFM – Frontend Manager for WooCommerce allows Stored XSS.This issue affects WCFM – Frontend Manager for WooCommerce: from n/a through 6.7.8...

CVE-2024-29931

WP Go Maps

CVE-2024-29929

CVE-2024-29929 describes a Stored XSS in WCFM – Frontend Manager for WooCommerce . It arises from improper neutralization of user input during web page generation, enabling arbitrary script execution in stored form. Affected versions are listed as from n/a through 6.7.8. The vulnerability is char...

CVE-2024-29925

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpWax Post Grid, Slider & Carousel Ultimate allows Stored XSS.This issue affects Post Grid, Slider & Carousel Ultimate: from n/a through 1.6.6...

CVE-2024-29928

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Codeus Advanced Sermons allows Reflected XSS.This issue affects Advanced Sermons: from n/a through 3.1...