CVE-2024-54424 WordPress Like in Vk.com plugin <= 0.5.2 - CSRF to Stored Cross-Site Scripting vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ilya Chekalskiy Like in Vk.com allows Stored XSS.This issue affects Like in Vk.com: from n/a through 0.5.2...

CVE-2024-54425 WordPress LionScripts: Site Maintenance plugin <= 2.1 - CSRF to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in LionScripts.com LionScripts: Site Maintenance & Noindex Nofollow Plugin allows Stored XSS.This issue affects LionScripts: Site Maintenance & Noindex Nofollow Plugin: from n/a through 2.1...

CVE-2024-54426

CVE-2024-54426 affects LeaderBoard Plugin for WordPress (

CVE-2024-54426 WordPress LeaderBoard Plugin plugin <= 1.2.4 - CSRF to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in crossfitatgg LeaderBoard Plugin leaderboard-lite allows Stored XSS.This issue affects LeaderBoard Plugin: from n/a through = 1.2.4...

CVE-2024-54427 WordPress Category of Posts plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Linda MacPhee-Cobb Category of Posts allows Stored XSS.This issue affects Category of Posts: from n/a through 1.0...

CVE-2024-54427

CVE-2024-54427 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Category of Posts that enables a Stored XSS payload. The issue affects versions up to 1.0 (and no public details provided about affected ranges beyond that). Public references in Red Hat and Wordfen...

CVE-2024-54429 WordPress Aphorismus plugin <= 1.2.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ivan Ovsyannikov Aphorismus allows Stored XSS.This issue affects Aphorismus: from n/a through 1.2.0...

CVE-2024-54428 WordPress Add image to Post plugin <= 0.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in onigetoc Add image to Post add-image-to-post allows Stored XSS.This issue affects Add image to Post: from n/a through = 0.6...

CVE-2024-54429 WordPress Aphorismus plugin <= 1.2.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in ivan-ovsyannikov Aphorismus aphorismus allows Stored XSS.This issue affects Aphorismus: from n/a through = 1.2.0...

CVE-2024-54428 WordPress Add image to Post plugin <= 0.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in onigetoc Add image to Post allows Stored XSS.This issue affects Add image to Post: from n/a through 0.6...

CVE-2024-54429

CVE-2024-54429 concerns the Aphorismus WordPress plugin. A Cross-Site Request Forgery (CSRF) leads to Stored XSS, affecting Aphorismus from n/a through 1.2.0. Root cause described as CSRF enabling Stored XSS; exploitation status and patch details are not provided in the supplied documents.

CVE-2024-54431 WordPress Admin Customization plugin <= 2.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in phpdevp Admin Customization wpp-customization allows Stored XSS.This issue affects Admin Customization: from n/a through = 2.2...

CVE-2024-54433 WordPress Simple Booking – Widget plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Simple Booking Simple Booking Widget allows Stored XSS.This issue affects Simple Booking Widget: from n/a through 1.1...

CVE-2024-54434

CVE-2024-54434 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin phZoom (Phoetry) that leads to Stored XSS. Affected: phZoom versions up to 1.2.92. Root cause: CSRF allowing stored XSS payloads, as stated in the description. Impact: Stored XSS risk in sites using...

CVE-2024-54434 WordPress phZoom plugin <= 1.2.92 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in BenJemin phZoom phzoom allows Stored XSS.This issue affects phZoom: from n/a through = 1.2.92...

CVE-2024-54433

CVE-2024-54433 describes a CSRF vulnerability in the Simple Booking Widget that can lead to stored XSS. Affected software is Simple Booking Widget (version range from n/a through 1.1). Connected sources confirm the issue and indicate patch status as Unpatched; no public exploitation status is pro...

CVE-2024-54435 WordPress Onlywire Multi Autosubmitter plugin <= 1.2.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Thomas Hoefter Onlywire Multi Autosubmitter onlywire-multi-autosubmitter allows Stored XSS.This issue affects Onlywire Multi Autosubmitter: from n/a through = 1.2.4...

CVE-2024-54435

CVE-2024-54435 is a CSRF-to-Stored XSS vulnerability in the WordPress plugin “Onlywire Multi Autosubmitter,” affecting versions up to 1.2.4 (availability in initial document and EU/RH references). The CVE entry indicates the issue is a Cross-Site Request Forgery vulnerability that can lead to Sto...

CVE-2024-54437 WordPress jCarousel for WordPress plugin <= 1.0 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Merrill M. Mayer jCarousel allows Stored XSS.This issue affects jCarousel: from n/a through 1.0...

CVE-2024-54437

CVE-2024-54437 affects jCarousel for WordPress (Merrill M. Mayer jCarousel). The issue is Improper Neutralization of Input During Web Page Generation, enabling Stored Cross-Site Scripting. According to the CVE entry, the vulnerability allows stored XSS in affected pages, with a CVSS v3.1 base sco...