CVE-2024-37261

The WP-Lister Lite for Amazon WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) in versions up to and including 2.6.16 . The root cause is insufficient input sanitization and output escaping, which allows unauthenticated attackers to inject arbitrary web scripts into pages. I...

CVE-2024-37267

CVE-2024-37267 concerns the WordPress Striking theme (

PT-2024-24608 · Ankitects +1 · Anki +1

Name of the Vulnerable Software and Affected Versions: Ankitects Anki version 24.04 Description: A reflected XSS issue exists in the handling of invalid paths in the Flask server. This can be triggered by a specially crafted flashcard, leading to JavaScript code execution and potentially resultin...

PT-2024-27421 · Unknown · Permalink Manager Lite

Name of the Vulnerable Software and Affected Versions: Permalink Manager Lite versions 2.4.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...

CVE-2024-38781

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ArtistScope CopySafe Web Protection allows Reflected XSS.This issue affects CopySafe Web Protection: from n/a through 3.15...

CVE-2024-37485

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Vinny Alves UseStrict Consulting bbPress Notify allows Reflected XSS.This issue affects bbPress Notify: from n/a through 2.18.3...

CVE-2024-37459

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PayPlus LTD PayPlus Payment Gateway allows Reflected XSS.This issue affects PayPlus Payment Gateway: from n/a through 6.6.8...

CVE-2024-37459

CVE-2024-37459 is a reflected XSS vulnerability in PayPlus Payment Gateway (WordPress plugin) affecting PayPlus Gateway versions up to and including 6.6.8. The issue is triggered by improper input neutralization during web page generation. Public sources in connected docs corroborate the vulnerab...

CVE-2024-37485

CVE-2024-37485 is a reflected Cross-Site Scripting vulnerability in the bbPress Notify (No-Spam) WordPress plugin, caused by improper input neutralization during web page generation. Affected versions are bbPress Notify 2.18.3 and earlier. Public sources (NVD, Red Hat, CVE lists, and Wordfence vu...

CVE-2024-38781

CVE-2024-38781 relates to ArtistScope CopySafe Web Protection (WordPress plugin) and is a Reflected Cross-Site Scripting (XSS) vulnerability in versions <= 3.15. Public vulnerability details indicate that input is improperly neutralized during web page generation, enabling reflected XSS. Multi...

CVE-2024-37487

CVE-2024-37487 affects WP Directory Kit (WordPress plugin) with a reflected XSS due to improper input neutralization during web page generation. Affected: WP Directory Kit ≤ 1.3.5. CVSS data from sources in the connected docs show Network attack vector, Low confidentiality/integrity impact, user ...

CVE-2024-37559

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Echenley Counterpoint allows Reflected XSS.This issue affects Counterpoint: from n/a through 1.8.1...

CVE-2024-37559

Counterpoint WordPress theme vulnerability (CVE-2024-37559): Reflected XSS due to improper input neutralization during web page generation. Affected: Counterpoint theme in versions n/a through 1.8.1. Impact is described as Reflected XSS; exploitation details are not provided in the sources. Remed...

CVE-2024-37953

CVE-2024-37953 is a Reflected XSS in the MBE eShip WordPress plugin (MBE eShip) caused by improper neutralization of input during web page generation. Affected versions are up to and including 2.1.2. The vulnerability is publicly documented by Red Hat and other sources, which also advise upgradin...

CVE-2024-38711

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.7.1...

CVE-2024-38680

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Appmaker Appmaker – Convert WooCommerce to Android & iOS Native Mobile Apps allows Reflected XSS.This issue affects Appmaker – Convert WooCommerce to Android & iOS Native Mobile Apps: from n...

CVE-2024-38673

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Obtain Infotech Multisite Content Copier/Updater allows Reflected XSS.This issue affects Multisite Content Copier/Updater: from n/a through 1.5.0...

CVE-2024-38669

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in a3rev Software WooCommerce Predictive Search allows Reflected XSS.This issue affects WooCommerce Predictive Search: from n/a through 6.0.1...

CVE-2024-38673

CVE-2024-38673 concerns the WordPress plugin “Multisite Content Copier/Updater.” The connected records describe an Reflect ed XSS due to Improper Neutralization of Input During Web Page Generation. Affected versions are indicated as “from n/a through 1.5.0.” The CVSS metrics shown (base score 7.1...

CVE-2024-38694

CVE-2024-38694 is a Reflected XSS in the Moloni WordPress plugin (affected: up to version 4.7.4). Exploitable via improper input neutralization during web page generation. Remediation: upgrade to a version containing the fix (beyond 4.7.4) per the CVE details.