CVE-2024-37259

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Extended The Ultimate WordPress Toolkit – WP Extended wpextended.This issue affects The Ultimate WordPress Toolkit – WP Extended: from n/a through = 2.4.7...

CVE-2024-37257

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Maciej Bis Permalink Manager Lite allows Reflected XSS.This issue affects Permalink Manager Lite: from n/a through 2.4.3.3...

CVE-2024-37257

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Maciej Bis Permalink Manager Lite allows Reflected XSS.This issue affects Permalink Manager Lite: from n/a through 2.4.3.3...

CVE-2024-37245

CVE-2024-37245 is a Reflected Cross-Site Scripting (XSS) vulnerability in Vsourz Digital All In One Redirection for WordPress. The issue affects All In One Redirection versions from n/a through 2.2.0. The vulnerability arises from improper input neutralization during web page generation, enabling...

CVE-2024-37257

CVE-2024-37257 describes a Reflected XSS in Permalink Manager Lite (WordPress plugin) affecting versions up to 2.4.3.3. The vulnerability is due to improper neutralization of input during web page generation. Connected sources note the vulnerability is patched, but the exact fixed version is not ...

CVE-2024-37258

CVE-2024-37258 corresponds to a WordPress Social Rocket plugin issue (Reflected XSS) affecting 1.3.3 and earlier. The connected Wordfence entries identify it as an active issue with patched status in the wider intake, but the provided documents do not specify a concrete fixed version. The vulnera...

CVE-2024-37259

CVE-2024-37259 affects The Ultimate WordPress Toolkit – WP Extended (WP Extended) plugin. Public sources describe Cross-Site Scripting (XSS) in WP Extended up to version 2.4.7, with varying classifications across sources: the NVD entry cites Reflected XSS, while other connected templates discuss ...

CVE-2024-37261

CVE-2024-37261 affects WP-Lister Lite for Amazon (WordPress) with a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. The issue impacts versions up to and including 2.6.16 (n/a through 2.6.16). Public disclosures list the vulner...

CVE-2024-37267

CVE-2024-37267 concerns the WordPress Striking theme (

PT-2024-24608 · Ankitects +1 · Anki +1

Name of the Vulnerable Software and Affected Versions: Ankitects Anki version 24.04 Description: A reflected XSS issue exists in the handling of invalid paths in the Flask server. This can be triggered by a specially crafted flashcard, leading to JavaScript code execution and potentially resultin...

PT-2024-27421 · Unknown · Permalink Manager Lite

Name of the Vulnerable Software and Affected Versions: Permalink Manager Lite versions 2.4.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...

CVE-2024-38781

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ArtistScope CopySafe Web Protection allows Reflected XSS.This issue affects CopySafe Web Protection: from n/a through 3.15...

CVE-2024-37485

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Vinny Alves UseStrict Consulting bbPress Notify allows Reflected XSS.This issue affects bbPress Notify: from n/a through 2.18.3...

CVE-2024-37459

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PayPlus LTD PayPlus Payment Gateway allows Reflected XSS.This issue affects PayPlus Payment Gateway: from n/a through 6.6.8...

CVE-2024-37459

CVE-2024-37459 is a reflected XSS vulnerability in PayPlus Payment Gateway (WordPress plugin) affecting PayPlus Gateway versions up to and including 6.6.8. The issue is triggered by improper input neutralization during web page generation. Public sources in connected docs corroborate the vulnerab...

CVE-2024-37485

CVE-2024-37485 is a reflected Cross-Site Scripting vulnerability in the bbPress Notify (No-Spam) WordPress plugin, caused by improper input neutralization during web page generation. Affected versions are bbPress Notify 2.18.3 and earlier. Public sources (NVD, Red Hat, CVE lists, and Wordfence vu...

CVE-2024-38781

CVE-2024-38781 relates to ArtistScope CopySafe Web Protection (WordPress plugin) and is a Reflected Cross-Site Scripting (XSS) vulnerability in versions <= 3.15. Public vulnerability details indicate that input is improperly neutralized during web page generation, enabling reflected XSS. Multi...

CVE-2024-37487

CVE-2024-37487 affects WP Directory Kit (WordPress plugin) with a reflected XSS due to improper input neutralization during web page generation. Affected: WP Directory Kit ≤ 1.3.5. CVSS data from sources in the connected docs show Network attack vector, Low confidentiality/integrity impact, user ...

CVE-2024-37559

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Echenley Counterpoint allows Reflected XSS.This issue affects Counterpoint: from n/a through 1.8.1...

CVE-2024-37559

Counterpoint WordPress theme vulnerability (CVE-2024-37559): Reflected XSS due to improper input neutralization during web page generation. Affected: Counterpoint theme in versions n/a through 1.8.1. Impact is described as Reflected XSS; exploitation details are not provided in the sources. Remed...