CVE-2024-50547 WordPress Themedy Toolbox plugin <= 1.0.16 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark Hodder Themedy Toolbox themedy-toolbox allows DOM-Based XSS.This issue affects Themedy Toolbox: from n/a through = 1.0.16...

CVE-2024-50547

CVE-2024-50547 is a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Themedy Toolbox (versions up to and including 1.0.16). The issue arises from improper neutralization of input during web page generation, described as a DOM-based XSS in some sources and as an input handling weak...

CVE-2024-50549 WordPress Bonway Static Block Editor plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Steven Nolles Bonway Static Block Editor bonway-static-block-editor allows DOM-Based XSS.This issue affects Bonway Static Block Editor: from n/a through = 1.1.0...

CVE-2024-50549 WordPress Bonway Static Block Editor plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Steven Nolles Bonway Static Block Editor bonway-static-block-editor allows DOM-Based XSS.This issue affects Bonway Static Block Editor: from n/a through = 1.1.0...

CVE-2024-50548 WordPress Awesome Progress Bar plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Abdullah Nahian Awesome Progress Bar awesome-progess-bar allows DOM-Based XSS.This issue affects Awesome Progress Bar: from n/a through = 1.0.13...

CVE-2024-50549

CVE-2024-50549 is a DOM-based Cross-Site Scripting (XSS) vulnerability in WordPress plugin Bonway Static Block Editor, affecting versions up to 1.1.0 (designated as n/a through 1.1.0). The issue, described as Improper Neutralization of Input During Web Page Generation, has a CVSS v3.1 base score ...

CVE-2024-50554 WordPress Sided plugin <= 1.4.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sided Sided sided allows DOM-Based XSS.This issue affects Sided: from n/a through = 1.4.5...

CVE-2024-50553

CVE-2024-50553 — DOM-based XSS in WordPress plugin Classy Addons for Elementor (

CVE-2024-50556 WordPress WM Zoom plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WorldMarkerter WM Zoom wm-zoom allows DOM-Based XSS.This issue affects WM Zoom: from n/a through = 1.0...

CVE-2024-50556

CVE-2024-50556 affects WordPress WM Zoom plugin versions

CVE-2024-51795

CVE-2024-51795: WordPress plugin ByteLabX Pdf Embedder Fay is affected (versions up to 1.10.1). The issue is a DOM-Based XSS caused by improper input neutralization during web page generation. Impact is DOM-based script execution in affected pages. The record notes a fix, but the exact patched ve...

CVE-2024-51796 WordPress Trendy Restaurant Menu plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPManageNinja Trendy Restaurant Menu allows DOM-Based XSS.This issue affects Trendy Restaurant Menu: from n/a through 1.0.0...

CVE-2024-51796

CVE-2024-51796 describes a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin “Trendy Restaurant Menu” by WPManageNinja. The issue arises from improper input neutralization during web page generation, affecting Trendy Restaurant Menu versions up to 1.0.0 (the range given in rela...

CVE-2024-51797 WordPress Ultimate Accordion plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md. Shiddikur Rahman Ultimate Accordion allows DOM-Based XSS.This issue affects Ultimate Accordion: from n/a through 1.0...

CVE-2024-51797 WordPress Ultimate Accordion plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Md. Shiddikur Rahman Ultimate Accordion ultimate-accordion allows DOM-Based XSS.This issue affects Ultimate Accordion: from n/a through = 1.0...

CVE-2024-51798 WordPress Surbma | Font Awesome plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Surbma Surbma | Font Awesome surbma-font-awesome allows DOM-Based XSS.This issue affects Surbma | Font Awesome: from n/a through = 3.0...

CVE-2024-51799

CVE-2024-51799 affects Bg Patriarchia BU (WordPress plugin) up to version 2.2.3, with a DOM-based Cross-Site Scripting vulnerability caused by improper input neutralization during web page generation. This can enable XSS on pages rendered by Bg Patriarchia BU. Evidence from multiple sources confi...

CVE-2024-51802

CVE-2024-51802 is a DOM-based XSS vulnerability in the Bread & Butter WordPress plugin (Bread & Butter) affecting versions up to 7.4.857. The issue arises from improper neutralization of input during Web Page Generation, enabling cross-site scripting. Multiple connected sources (e.g., Red Hat adv...

CVE-2024-51803

CVE-2024-51803 affects Magnetic Creative’s WordPress plugin “Inline Click To Tweet.” The vulnerability is a DOM-based XSS triggered by improper neutralization of user input during web page generation, affecting the Inline Click To Tweet component from versions n/a to 1.0.0. The Connected document...

CVE-2024-51804 WordPress Moka Get Posts Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bobmatnyc Moka Get Posts Shortcode moka-get-posts allows DOM-Based XSS.This issue affects Moka Get Posts Shortcode: from n/a through = 1.0...