CVE-2024-54389

CVE-2024-54389 (addWeather) is documented as a Cross-Site Request Forgery to Stored Cross-Site Scripting issue affecting addWeather versions up to 2.5.1. The Red Hat/Wordfence records corroborate the CSRF-to-XSS chain and list the vulnerability as currently unpatched. Affected software: addWeathe...

CVE-2024-54391 WordPress WordPress Filter plugin <= 1.4.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in mattwalters WordPress Filter wordpress-filter allows Stored XSS.This issue affects WordPress Filter: from n/a through = 1.4.1...

CVE-2024-54391

CVE-2024-54391 : Cross-Site Request Forgery (CSRF) leads to Stored XSS in the WordPress Filter plugin. Affected: WordPress Filter with versions up to 1.4.1 (no public details on root cause beyond CSRF-XSS linkage in the provided documents). Connected sources corroborate the CSRF-to-XSS descriptio...

CVE-2024-54392

CVE-2024-54392 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WP微信机器人 (Midoks WP Weixin Robot) that permits Stored XSS on affected pages. Public references within the connected sources identify the issue as affecting the WP微信机器人 plugin for WordPress versions f...

CVE-2024-54393

CVE-2024-54393 is documented as a Cross-Site Request Forgery (CSRF) vulnerability in the WP Fiddle WordPress plugin (WP-Fiddle). The affected range indicates WP Fiddle from n/a through version 1.0. The CVE also indicates Stored XSS is possible, implying CSRF could lead to XSS in the affected plug...

CVE-2024-54394 WordPress Mandrill WP plugin <= 1.0.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Web solution soft Mandrill WP allows Stored XSS.This issue affects Mandrill WP: from n/a through 1.0.5...

CVE-2024-54393 WordPress WP Fiddle plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Sheikh Heera WP Fiddle wp-fiddle allows Stored XSS.This issue affects WP Fiddle: from n/a through = 1.0...

CVE-2024-54397 WordPress Go Animate plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Antonio Gocaj Go Animate allows Stored XSS.This issue affects Go Animate: from n/a through 1.0...

CVE-2024-54397

Public details about CVE-2024-54397 are not provided in the connected documents. The Initial Description notes a CSRF leading to Stored XSS in Go Animate (Go Animate plugin), but no concrete technical details (version, impact, or fix) are included.

CVE-2024-54397 WordPress Go Animate plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in antonio.gocaj Go Animate goanimate allows Stored XSS.This issue affects Go Animate: from n/a through = 1.0...

CVE-2024-54399 WordPress CRUDLab Google Plus Button plugin <= 1.0.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in CRUDLab CRUDLab Google Plus Button crudlab-google-plus allows Stored XSS.This issue affects CRUDLab Google Plus Button: from n/a through = 1.0.2...

CVE-2024-54399 WordPress CRUDLab Google Plus Button plugin <= 1.0.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in CRUDLab CRUDLab Google Plus Button crudlab-google-plus allows Stored XSS.This issue affects CRUDLab Google Plus Button: from n/a through = 1.0.2...

CVE-2024-54398 WordPress Flaming Forms plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in jcaruso001 Flaming Forms flaming-forms allows Stored XSS.This issue affects Flaming Forms: from n/a through = 1.0.1...

CVE-2024-54399

CVE-2024-54399 describes a CSRF-to-Stored XSS vulnerability in the CRUDLab Google Plus Button plugin for WordPress, affecting versions up to 1.0.2. The issue is triggered via CSRF, leading to stored cross-site scripting. The CVSS 3.1 base score is 7.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L). Public...

CVE-2024-54398 WordPress Flaming Forms plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Project Caruso Flaming Forms allows Stored XSS.This issue affects Flaming Forms: from n/a through 1.0.1...

CVE-2024-54400

CVE-2024-54400 affects AppMaps (MELONIQ.NET). The issue is a Cross-Site Request Forgery that enables Stored XSS in AppMaps versions up to 1.1. The CVE entry lists a CVSS v3.1 base score of 7.1 (HIGH) with network attack vector, low attack complexity, and user interaction required, under changed s...

CVE-2024-54400 WordPress AppMaps plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in MELONIQ.NET AppMaps allows Stored XSS.This issue affects AppMaps: from n/a through 1.1...

CVE-2024-54401 WordPress Advanced Fancybox plugin <= 1.1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ciprian Turcu Advanced Fancybox advanced-fancybox allows Stored XSS.This issue affects Advanced Fancybox: from n/a through = 1.1.1...

CVE-2024-54404

CVE-2024-54404 affects the MDC Comment Toolbar WordPress plugin. Affected: MDC Comment Toolbar

CVE-2024-54407 WordPress CK and SyntaxHighlighter plugin <= 3.4.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in a328496647 CK and SyntaxHighlighter ck-and-syntaxhighlighter allows Stored XSS.This issue affects CK and SyntaxHighlighter: from n/a through = 3.4.2...