CVE-2024-52458

CVE-2024-52458 is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin TM Islamic Helper, affecting versions

CVE-2024-52460

CVE-2024-52460 – Reflected XSS in AtaraPay WooCommerce Payment Gateway . Affected software: WordPress plugin AtaraPay WooCommerce Payment Gateway versions up to 2.0.13. Root cause: improper neutralization of input during web page generation. Impact: reflected Cross-Site Scripting; CVSS v3.1 base ...

CVE-2024-52461

CVE-2024-52461 corresponds to a Reflected Cross-Site Scripting (XSS) in the WordPress Infinite Slider plugin. Affected: Infinite Slider versions prior to or equal to 2.0.1. Root cause: improper input neutralization during web page generation. Impact is XSS risk on sites using the plugin; CVSS v3....

CVE-2024-52463

CVE-2024-52463 is a reflected XSS affecting the WordPress Post By Email plugin (versions

CVE-2024-52464

CVE-2024-52464: Reflected XSS in WordPress plugin amr shortcodes (versions 1.7 and earlier). Root cause is improper input handling during web page generation, enabling an attacker-controlled input to be reflected in the output. Affected component: amr shortcodes. Impact: Reflected XSS risk on pag...

CVE-2024-52465

CVE-2024-52465 is a WordPress LGPD Framework (Data443) vulnerability: Reflected XSS due to improper input neutralization during web page generation. Affected versions are LGPD Framework: n/a through 2.0.2. Public sources (NVD, Red Hat, CIRCL, Patchstack) agree on a Reflected XSS issue with CVSS v...

CVE-2024-52467

CVE-2024-52467 : WordPress plugin AI Responsive Gallery Album (versions up to 1.4) is affected by a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Public entries (CVE records, Patchstack enrichment, and Wordfence vulnerabilit...

CVE-2024-52484

CVE-2024-52484 affects WordPress plugin Wc Recently viewed products, specifically versions

CVE-2024-53725 WordPress Post Hits Counter plugin <= 2.8.23 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in aMiT Post Hits Counter hits-counter allows Reflected XSS.This issue affects Post Hits Counter: from n/a through = 2.8.23...

CVE-2024-53725

CVE-2024-53725 is a CSRF to Reflected XSS vulnerability in the WordPress plugin WordPress Post Hits Counter (

WordPress Awesome Shortcodes plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Awesome Shortcodes versions = 1.7.2...

WordPress Block Controller plugin <= 1.4.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Block Controller versions = 1.4.3...

PT-2024-35309 · WordPress · Woocommerce Price Alert

Name of the Vulnerable Software and Affected Versions: WooCommerce Price Alert versions 1.0.4 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This problem affects the...

PT-2024-35308 · Leadboxer · Leadboxer

Name of the Vulnerable Software and Affected Versions: LeadBoxer versions prior to 1.2 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This problem affects LeadBoxer, enabling...

PT-2024-35298 · Templines · Templines Tm Islamic Helper

Name of the Vulnerable Software and Affected Versions: Templines TM Islamic Helper versions 1.0.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This enables malicious script...

WordPress WooCommerce Ultimate Gift Card plugin < 2.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin WooCommerce Ultimate Gift Card versions 2.9.1...

CVE-2024-11402

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kubiq Block Editor Bootstrap Blocks block-editor-bootstrap-blocks allows Reflected XSS.This issue affects Block Editor Bootstrap Blocks: from n/a through = 6.6.1...

CVE-2024-11402

CVE-2024-11402 corresponds to WordPress Block Editor Bootstrap Blocks plugin (

CVE-2024-49502 Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web

A Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in the Setup Wizard, HTTP Proxy credentials pane in spacewalk-web allows attackers to attack users by providing specially crafted URLs to click. This issue affects Container...

CVE-2024-49502 Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web

A Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in the Setup Wizard, HTTP Proxy credentials pane in spacewalk-web allows attackers to attack users by providing specially crafted URLs to click. This issue affects Container...