CVE-2024-29919

Technical details about CVE-2024-29919 are not provided in the supplied documents. No information on affected versions, exploit status, or remediation is present. Monitor for updates.

CVE-2024-29918

CVE-2024-29918 : The Survey Maker WordPress plugin is described as vulnerable to a reflected Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Affected: Survey Maker (WordPress) versions from n/a through 4.0.6. Root cause: insufficient input sanitization ...

CVE-2024-29917

CVE-2024-29917 corresponds to Compact WP Audio Player. Connected sources confirm a stored XSS vulnerability in Compact WP Audio Player, exploitable via fileurl with authenticated access. Affected range includes 1.9.9 and earlier. The Wordfence entry indicates the issue has a patch status of Patch...

CVE-2024-29915

CVE-2024-29915 affects Podlove Podlove Podcast Publisher for WordPress (affected versions: n/a through 4.0.9). The vulnerability is an XSS issue arising from improper neutralization of input during web page generation (Reflected XSS). The connected Red Hat entry reiterates the same description, c...

CVE-2024-29914

Technical details about CVE-2024-29914 are not provided in the supplied documents. The initial entry notes a Stored XSS in MotoPress Stratum (WordPress plugin) up to version 1.3.15, but no fix/impact specifics are included here.

CVE-2024-29913

CVE-2024-29913 is an improper input handling vulnerability causing Stored XSS in Tutor LMS Elementor Addons (Themeum). Affected: Tutor LMS Elementor Addons up to 2.1.3. Root cause: improper neutralization of input during web page generation. Impact: stored XSS. Remediation/patch details are not p...

CVE-2024-29912

CVE-2024-29912 is a stored XSS in the WordPress plugin iCalendrier , caused by improper neutralization during web page generation. Affected versions are listed as from n/a through 1.80 . The connected Red Hat entry reiterates the same vulnerability description. No remediation/patch details are pr...

CVE-2024-29911

CVE-2024-29911 is an input handling flaw causing stored XSS in Master Addons for Elementor (Jewel Theme Master Addons). Affected: Master Addons for Elementor from n/a through 2.0.5.4.1. The connected documents confirm the issue type as Cross-Site Scripting due to improper input neutralization, bu...

CVE-2024-29910

CVE-2024-29910 refers to a Stored Cross-Site Scripting (XSS) flaw in the WordPress plugin “Dropdown Multisite selector.” The connected data indicate this affects versions up to 0.9.2 (listed as <= 0.9.2) with the issue described as Stored XSS via shortcode. The vulnerability is categorized as ...

CVE-2024-29910 WordPress Dropdown Multisite selector plugin <= 0.9.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alordiel Dropdown Multisite selector allows Stored XSS.This issue affects Dropdown Multisite selector: from n/a through 0.9.2...

CVE-2024-29909 WordPress Travelers' Map plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Camille Verrier Travelers' Map allows Stored XSS.This issue affects Travelers' Map: from n/a through 2.2.0...

CVE-2024-29907 WordPress SEO Backlink Monitor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Active Websight SEO Backlink Monitor allows Reflected XSS.This issue affects SEO Backlink Monitor: from n/a through 1.5.0...

CVE-2024-29907

CVE-2024-29907 affects the SEO Backlink Monitor plugin for WordPress, exposing a Reflected XSS in web page generation. Affected: SEO Backlink Monitor

CVE-2024-30192

CVE-2024-30192 affects the WordPress GS Pins for Pinterest plugin (GS Pins for Pinterest) up to version 1.8.2. It is a Stored XSS vulnerability caused by improper neutralization of user input during web page generation, which can be triggered via shortcode usage on vulnerable sites. The issue is ...

CVE-2024-30192 WordPress Pinterest Plugin <= 1.8.2 - Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GS Plugins GS Pins for Pinterest allows Stored XSS.This issue affects GS Pins for Pinterest: from n/a through 1.8.2...

CVE-2024-30194

Sunshine Photo Cart

CVE-2024-30195

CVE-2024-30195 is a Reflected XSS in Semenov New RoyalSlider for WordPress, affecting New RoyalSlider up to version 3.4.2. The initial description notes improper input handling that enables cross-site scripting; connected documents confirm the product and vulnerability type but provide no explici...

CVE-2024-27188

CVE-2024-27188 concerns the WordPress Breeze plugin (Cloudways Breeze) with a stored XSS vulnerability caused by improper neutralization of input during web page generation. Affected versions are Breeze through 2.1.3; the patch is to upgrade to version 2.1.4 or later. The issue requires the attac...

CVE-2024-30197

CVE-2024-30197 corresponds to an authenticated Stored XSS in the WordPress plugin Church Admin. According to the entry, Church Admin versions up to 4.0.26 are affected and allow stored XSS via shortcode due to improper input neutralization during web page generation. The vulnerability impact is c...

CVE-2024-30198 WordPress Buddyforms plugin <= 2.8.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeKraft BuddyForms allows Reflected XSS.This issue affects BuddyForms: from n/a through 2.8.5...