CVE-2024-32564

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPXPO PostX ultimate-post allows DOM-Based XSS.This issue affects PostX: from n/a through = 4.0.1...

CVE-2024-32558

CVE-2024-32558 is a reflected XSS in the WordPress plugin “eCommerce Product Catalog” by impleCode, affecting versions from unknown up to 3.3.32. The issue stems from improper input neutralization during web page generation, enabling Reflected XSS payloads. Wordfence/Red Hat entries indicate the ...

CVE-2024-32564

CVE-2024-32564 affects Post Grid Gutenberg Blocks and PostX (Post Grid for WordPress) with a Stored XSS in Post Grid blocks (improper input neutralization during page generation). Affected versions: PostX – Gutenberg Blocks for Post Grid up to 4.0.1. Root cause: improper neutralization of input; ...

CVE-2024-32575

CVE-2024-32575 affects Mega Elements – Addons for Elementor. The vulnerability is a Stored Cross-Site Scripting (XSS) in Mega Elements <= 1.1.9. Public sources (Red Hat advisory and Wordfence vulnerability details) confirm the affected product and the issue type. The issue arises from improper...

CVE-2024-32576

The CVE-2024-32576 entry concerns the WordPress plugin BA Book Everything (WordPress Plugin) with versions ≤ 1.6.8. The vulnerability is a Cross-Site Scripting (XSS) flaw caused by improper neutralization during web page generation, resulting in stored XSS. Affected component: the WordPress plugi...

CVE-2024-32577

CVE-2024-32577 – CBX Bookmark & Favorite (cbxwpbookmark) Stored XSS in the WordPress CBXWPBookmark plugin. Affects CBX Bookmark & Favorite:

CVE-2024-32582

CVE-2024-32582 is a Stored XSS vulnerability in the WordPress plugin Debug Log Manager (vulnerable from n/a up to 2.3.1). The issue arises from improper input neutralization during web page generation, enabling malicious scripts to be stored and executed in a user’s browser. The CVSS score in pro...

CVE-2024-32583

CVE-2024-32583 concerns WordPress Photo Gallery by 10Web plugin. A Reflected Cross-Site Scripting (XSS) vulnerability exists in versions up to and including 1.8.21, allowing unauthenticated attackers to inject scripts via input that is reflected in page generation. The issue affects the plugin’s ...

CVE-2024-32584

Technical details about CVE-2024-32584 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-32595

CVE-2024-32595 is a Reflected XSS affecting WP Helper Premium for WordPress (pre-4.6.0). Affected component: WP Helper Premium plugin; root cause: improper input neutralization during web page generation leading to reflected script execution. Impact: low to high depending on context (per CVSS v3....

CVE-2024-32596

CVE-2024-32596 is a Stored XSS vulnerability in the DSGVO Youtube WordPress plugin. Affected: DSGVO Youtube versions n/a through 1.4.5. Root cause: improper input neutralization during web page generation leading to stored cross-site scripting. Impact: stored XSS could compromise users who load v...

CVE-2024-32598

CVE-2024-32598 affects BA Book Everything (WordPress plugin) with Stored XSS via shortcode in versions up to 1.6.8. Root cause: Improper input neutralization during web page generation. Impact per sources: potential stored XSS within affected pages; remediation: upgrade to v1.6.8 (patched). Not a...

CVE-2024-32457

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in The CSSIgniter Team Elements Plus! allows Stored XSS.This issue affects Elements Plus!: from n/a through 2.16.3...

CVE-2024-32508

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in deTheme DethemeKit For Elementor allows Stored XSS.This issue affects DethemeKit For Elementor: from n/a through 2.0.2...

CVE-2024-32527

CVE-2024-32527 affects the Jotform Online Forms WordPress plugin (versions up to and including 1.3.1). The issue is Stored Cross‑Site Scripting caused by insufficient input sanitization and output escaping in shortcode attributes, exploitable by authenticated users with contributor level access a...

CVE-2024-32539

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomUnited WP File Download Light allows Stored XSS.This issue affects WP File Download Light: from n/a through 1.3.3...

CVE-2024-31387

CVE-2024-31387 affects the Popup Like box – Page Plugin for WordPress (Popup Like box). It is a Stored XSS due to Improper Neutralization of Input During Web Page Generation, impacting versions from n/a to 3.7.2. The root cause is improper handling of input in web page generation, enabling stored...

CVE-2024-31928

Consolidated view: CVE-2024-31928 affects the WP Darko Top Bar (WordPress plugin). It is a stored XSS caused by improper input neutralization during web page generation, affecting Top Bar versions up to 3.0.5 (n/a to 3.0.5). Root cause: inadequate sanitization of input that is embedded into gener...

CVE-2024-31258

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Micro.Company Form to Chat App allows Stored XSS.This issue affects Form to Chat App: from n/a through 1.1.6...

CVE-2024-31256

CVE-2024-31256 is a Reflected XSS in the WordPress WebinarPress (WP Webinar System) plugin. Affected: WebinarPress versions up to 1.33.10. Root cause: improper neutralization of input during web page generation. Impact: potential disclosure/remote script execution via crafted input (low to modera...