CVE-2024-33598

Technical details about CVE-2024-33598 are not provided in the Connected Documents. The Initial description notes a Stored XSS in the WordPress Annual Archive (up to 1.6.0). Monitor for updates; no specifics on affected versions, vectors, or remediation are included.

CVE-2024-3060: Improper Neutralization of Special Elements used in an SQL Command

The ENL Newsletter WordPress plugin through 1.0.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admin+ to perform SQL injection attacks...

CVE-2024-33642: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EkoJR Advanced Post List allows Stored XSS.This issue affects Advanced Post List: from n/a through 0.5.6.1...

VulnCheck KEV: CVE-2024-33551

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in 8theme XStore Core allows SQL Injection.This issue affects XStore Core: from n/a through 5.3.5...

CVE-2023-23989

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: from n/a through 5.1.9.2...

CVE-2023-23989

CVE-2023-23989 affects the WordPress RegistrationMagic plugin up to version 5.1.9.2. It is an Improper Neutralization of Input During Web Page Generation (XSS) vulnerability causing content injection via untrusted input in RegistrationMagic. Root cause: insufficient input sanitization during page...

CVE-2024-32702

The ARForms WordPress plugin (versions

CVE-2024-32721

CVE-2024-32721 concerns the WordPress Jeg Elementor Kit plugin, with Stored XSS in the Testimonial Widget Attributes affecting versions up to 2.6.3. Red Hat notes insufficient input sanitization and output escaping, enabling authenticated attackers with contributor access or higher to inject scri...

CVE-2024-32723

CVE-2024-32723 affects the WordPress plugin Advanced Floating Content Lite (v0 through 1.2.5). It is a Stored XSS due to improper neutralization of input during web page generation. The connected documents do not provide a specific exploit path or a confirmed fix/version beyond the affected range.

CVE-2024-32952

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BloomPixel Max Addons Pro for Bricks allows Reflected XSS.This issue affects Max Addons Pro for Bricks: from n/a through 1.6.1...

CVE-2024-32791

CVE-2024-32791 affects Premium Addons for Elementor (LeaP13 Premium Addons for Elementor) with a Stored XSS in versions up to 4.10.25 due to improper input neutralization during web page generation. Affected product: Premium Addons for Elementor. Root cause: insufficient escaping/validation of sh...

CVE-2024-32801

Technical details for CVE-2024-32801 are not provided in the connected documents. No specifics on affected product/version/root cause/fix are given beyond the initial XSS description. Monitor for updates.

CVE-2024-32956

CVE-2024-32956: Stored XSS in RomethemeKit For Elementor (WordPress plugin). Affected: RomethemeKit For Elementor up to version 1.4.1. Root cause: improper input handling during web page generation leading to stored cross-site scripting. Impact details are limited in the provided documents beyond...

CVE-2024-32709

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Plechev Andrey WP-Recall.This issue affects WP-Recall: from n/a through 16.26.5...

CVE-2024-32706

The ARForms WordPress plugin (versions

CVE-2024-32834: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebToffee WooCommerce Shipping Label allows Stored XSS.This issue affects WooCommerce Shipping Label: from n/a through 2.3.8...

PT-2024-24875

Name of the Vulnerable Software and Affected Versions ShapedPlugin Widget Post Slider versions 1.3.5 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can injec...

PT-2024-25003

Name of the Vulnerable Software and Affected Versions RomethemeKit For Elementor versions 1.4.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For...

CVE-2024-32707: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Image Slider Widget allows Stored XSS.This issue affects Image Slider Widget: from n/a through 1.1.125...

CVE-2023-25790: Improper Authentication

Improper Authentication, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xtemos WoodMart allows Cross-Site Scripting XSS.This issue affects WoodMart: from n/a through 7.0.4...