2514 matches found
CVE-2024-30559
CVE-2024-30559 is a cross-site scripting (Stored XSS) vulnerability reported in the Spin 360 deg and 3D Model Viewer WordPress plugin. The CVE entry notes the flaw affects Spin 360 deg and 3D Model Viewer versions from an unspecified baseline up to 1.2.7. The linked Red Hat entry reiterates the i...
CVE-2024-31097
CVE-2024-31097 is a Reflected XSS in the WordPress SEO Title Tag plugin ( Stephan Spencer ), caused by improper input neutralization during web page generation and affects versions up to 3.5.9. This vulnerability is documented by Red Hat and Patchstack references; no mitigation details or patched...
CVE-2024-31123
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebDorado SpiderFAQ allows Reflected XSS.This issue affects SpiderFAQ: from n/a through 1.3.2...
CVE-2024-31106
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yooslider Yoo Slider allows Reflected XSS.This issue affects Yoo Slider: from n/a through 2.1.1...
CVE-2024-31108
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iFlyChat Team iFlyChat – WordPress Chat iflychat allows Stored XSS.This issue affects iFlyChat – WordPress Chat: from n/a through 4.7.2...
CVE-2024-30489
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in loopus WP Cost Estimation & Payment Forms Builder.This issue affects WP Cost Estimation & Payment Forms Builder: from n/a through 10.1.75...
CVE-2024-31102
CVE-2024-31102 is an input‑sanitization issue in the WordPress plugin Prenotazioni (by Scimone Ignazio) that allows Stored XSS via improper neutralization of input during web page generation. Affected range: Prenotazioni versions up to 1.7.4 (no details on fixed versions provided). Impact per the...
CVE-2024-31106
Technical details about CVE-2024-31106 are not provided in the supplied documents; no affected versions, root cause specifics, or remediation information are included here. Monitor for updates.
CVE-2024-31108
CVE-2024-31108 relates to iFlyChat – WordPress Chat (plugin), with a Stored XSS vulnerability in the web page generation input handling. The issue affects iFlyChat – WordPress Chat from n/a through 4.7.2, per the description. The connected data notes the vulnerability as a vulnerability in an act...
CVE-2024-30489
CVE-2024-30489 affects WP Cost Estimation & Payment Forms Builder for WordPress. Root cause: improper neutralization of SQL elements in a query, enabling SQL injection. Affected versions are up to 10.1.75 (n/a–10.1.75). CVSS v3.1 base score 8.5 (HIGH) with Attack Vector: Network, Attack Complexit...
CVE-2024-30435
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor.This issue affects Nexter Blocks: from n/a through = 3.2.5...
CVE-2024-30432
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Slider - Slider for your block editor allows Stored XSS.This issue affects B Slider - Slider for your block editor: from n/a through 1.1.12...
CVE-2024-30431
CVE-2024-30431 describes a Reflected XSS in the WordPress plugin Mang Board WP . The issue is caused by improper input neutralization during web page generation, affecting Mang Board WP versions from n/a through 1.8.0. Connected sources confirm the vulnerability type and affected version range; n...
CVE-2024-30440
CVE-2024-30440 : Stored XSS in the WordPress plugin Themify Event Post (vulnerable through 1.2.7) due to improper input neutralization during web page generation. Affected component: Themify Event Post. Root cause: Improper Neutralization of Input During Web Page Generation. Impact details are li...
CVE-2024-30444
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zionbuilder.Io WordPress Page Builder – Zion Builder allows Stored XSS.This issue affects WordPress Page Builder – Zion Builder: from n/a through 3.6.9...
CVE-2024-30444
CVE-2024-30444 describes a stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Zion Builder (zionbuilder.io). According to the Red Hat entry, the issue is caused by improper neutralization of input during web page generation, enabling stored XSS. The vulnerability affects Zion...
CVE-2024-30447
Technical details about CVE-2024-30447 (Creative Image Slider – Responsive Slider Plugin) are not provided in the connected documents. No product version, root cause, impact, or patch information is publicly available here; monitor for official advisories and vendor/user notifications.
CVE-2024-30449
CVE-2024-30449 : Reflected Cross‑Site Scripting in Booking Activities WordPress plugin. The issue is described as improper neutralization of input during web page generation, affecting Booking Activities versions up to 1.15.19 (inclusive). The connected Red Hat entry confirms the same vulnerabili...
