CVE-2024-29925

Technical details about CVE-2024-29925 (affected product/version, root cause, impact, and fix) are not provided in the supplied documents; monitor for updates.

CVE-2024-29924

Technical details about CVE-2024-29924 (affected product, root cause, versions, exploits, and fixes) are not provided in the supplied documents. Monitor for updates.

CVE-2024-30199

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Lab WP-Lister Lite for Amazon wp-lister-for-amazon.This issue affects WP-Lister Lite for Amazon: from n/a through = 2.6.8...

CVE-2024-29913

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS Elementor Addons allows Stored XSS.This issue affects Tutor LMS Elementor Addons: from n/a through 2.1.3...

CVE-2024-29912

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Baptiste Placé iCalendrier allows Stored XSS.This issue affects iCalendrier: from n/a through 1.80...

CVE-2024-29906

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter MDTF allows Stored XSS.This issue affects WordPress Meta Data and Taxonomies Filter MDTF: from n/a through 1.3.2...

CVE-2024-29820

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedNao PDF Builder for WPForms allows Stored XSS.This issue affects PDF Builder for WPForms: from n/a through 1.2.88...

CVE-2024-29919

Technical details about CVE-2024-29919 are not provided in the supplied documents. No information on affected versions, exploit status, or remediation is present. Monitor for updates.

CVE-2024-29918

CVE-2024-29918 : The Survey Maker WordPress plugin is described as vulnerable to a reflected Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Affected: Survey Maker (WordPress) versions from n/a through 4.0.6. Root cause: insufficient input sanitization ...

CVE-2024-29912

CVE-2024-29912 is a stored XSS in the WordPress plugin iCalendrier , caused by improper neutralization during web page generation. Affected versions are listed as from n/a through 1.80 . The connected Red Hat entry reiterates the same vulnerability description. No remediation/patch details are pr...

CVE-2024-29910

CVE-2024-29910 refers to a Stored Cross-Site Scripting (XSS) flaw in the WordPress plugin “Dropdown Multisite selector.” The connected data indicate this affects versions up to 0.9.2 (listed as <= 0.9.2) with the issue described as Stored XSS via shortcode. The vulnerability is categorized as ...

CVE-2024-29820

CVE-2024-29820 is a stored XSS in RedNao PDF Builder for WPForms caused by improper neutralization of input during web page generation. Affected product: PDF Builder for WPForms, versions: n/a through 1.2.88. CVSS 3.1 vector: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L (base 6.5, MEDIUM). Connected sourc...

CVE-2024-29907

CVE-2024-29907 affects the SEO Backlink Monitor plugin for WordPress, exposing a Reflected XSS in web page generation. Affected: SEO Backlink Monitor

CVE-2024-27188

CVE-2024-27188 concerns the WordPress Breeze plugin (Cloudways Breeze) with a stored XSS vulnerability caused by improper neutralization of input during web page generation. Affected versions are Breeze through 2.1.3; the patch is to upgrade to version 2.1.4 or later. The issue requires the attac...

CVE-2024-30197

CVE-2024-30197 corresponds to an authenticated Stored XSS in the WordPress plugin Church Admin. According to the entry, Church Admin versions up to 4.0.26 are affected and allow stored XSS via shortcode due to improper input neutralization during web page generation. The vulnerability impact is c...

CVE-2024-22299

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Foliovision: Making the web work for you FV Flowplayer Video Player allows Reflected XSS.This issue affects FV Flowplayer Video Player: from n/a through 7.5.41.7212...

CVE-2024-30199

CVE-2024-30199 is a Reflected XSS in WP-Lister Lite for Amazon (WordPress plugin) affecting versions up to 2.6.8. Connected Red Hat entry corroborates the same vulnerability description. The CVSSv3.1 base metrics provided in the initial data indicate a base score of 7.1 (HIGH) with Network attack...

CVE-2024-22288

Technical details about CVE-2024-22288 are not publicly provided in the supplied documents; monitor for updates.

CVE-2024-22311

Technical details about CVE-2024-22311 are not publicly provided in the supplied documents. The initial entry notes an XSS issue in Simply Schedule Appointments but no affected versions, impact specifics, exploit info, or fixes are disclosed here. Monitor for updates.

PT-2024-23290 · WordPress · Tomas Wordpress Tooltips

Name of the Vulnerable Software and Affected Versions: Tomas WordPress Tooltips versions prior to 9.4.5 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential remote attacks...