16410 matches found
CVE-2024-56036
CVE-2024-56036 pertains to the odPhotogallery WordPress plugin. The connected sources confirm a Reflected XSS vulnerability caused by improper input neutralization during web page generation in odPhotogallery, affecting versions from n/a through 0.5.3. The CVE description cites a cross-site scrip...
CVE-2024-56037 WordPress User Referral plugin <= 8.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SoftClever Limited User Referral user-referral-free allows Reflected XSS.This issue affects User Referral: from n/a through = 8.0...
CVE-2024-56060 WordPress HTML Forms plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Link Software LLC HTML Forms html-forms allows Reflected XSS.This issue affects HTML Forms: from n/a through = 1.4.1...
WordPress AHAthat Plugin plugin <= 1.6 - Reflected XSS via REQUEST_URI vulnerability
Reflected XSS via REQUESTURI vulnerability discovered by Bob Matyas in WordPress Plugin AHAthat versions = 1.6...
CVE-2024-12595
The AHAthat Plugin WordPress plugin through 1.6 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...
PT-2025-3185 · Unknown · Md Maruf Adnan Sami User Referral
Name of the Vulnerable Software and Affected Versions: Md Maruf Adnan Sami User Referral versions n/a through 8.0 Description: The issue affects Md Maruf Adnan Sami User Referral, allowing Reflected XSS due to improper neutralization of input during web page generation. This is a type of Cross-si...
PT-2025-3190 · Azzaroco · Azzaroco Wp Superbackup
Name of the Vulnerable Software and Affected Versions: Azzaroco WP SuperBackup versions 2.3.3 and earlier Description: The issue affects Azzaroco WP SuperBackup, allowing Reflected XSS due to improper neutralization of input during web page generation. This enables an attacker to inject malicious...
PT-2025-3170 · Wordpress Monsters · Preloader
Name of the Vulnerable Software and Affected Versions: Preloader by WordPress Monsters versions 1.2.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...
PT-2025-3171 · WordPress · Wp Ecommerce Quickpay
Name of the Vulnerable Software and Affected Versions: WP eCommerce Quickpay versions 1.1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attacker can inject...
CVE-2024-11846
The does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-11846
CVE-2024-11846 Travel Tour faces a reflected XSS due to improper sanitization/escaping of a parameter in Travel Tour before output. Affected software: Travel Tour (WordPress plugin) versions prior to 5.2.4. Impact is Reflected XSS potentially exploitable by attackers to run script in context of a...
CVE-2024-56228
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce.This issue affects Wishlist for WooCommerce: from n/a through = 3.1.2...
CVE-2024-56226
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Reflected XSS.This issue affects Royal Elementor Addons: from n/a through = 1.7.1001...
CVE-2024-56210
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DeluxeThemes Userpro userpro allows Reflected XSS.This issue affects Userpro: from n/a through = 5.1.9...
CVE-2024-56209
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SeventhQueen Kleo kleo allows Reflected XSS.This issue affects Kleo: from n/a through 5.4.4...
CVE-2024-56223
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fahad Mahmood Gulri Slider allows Reflected XSS.This issue affects Gulri Slider: from n/a through 3.5.8...
CVE-2024-56226
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Royal Royal Elementor Addons allows Reflected XSS.This issue affects Royal Elementor Addons: from n/a through 1.7.1001...
CVE-2024-56210
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DeluxeThemes Userpro allows Reflected XSS.This issue affects Userpro: from n/a through 5.1.9...
CVE-2024-56265
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPWeb WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.9...