CVE-2024-35704

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPBlockArt BlockArt Blocks allows Stored XSS.This issue affects BlockArt Blocks: from n/a through 2.1.5...

CVE-2024-35698

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YITHEMES YITH WooCommerce Tab Manager yith-woocommerce-tab-manager.This issue affects YITH WooCommerce Tab Manager: from n/a through = 1.35.0...

CVE-2024-35679 WordPress GiveWP plugin <= 3.12.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a through = 3.12.0...

CVE-2024-35696

CVE-2024-35696 affects the WP Docs WordPress plugin. The vulnerability is a Cross-Site Scripting issue (Reflected XSS) in WP Docs, with exploitation possible via input reflected during web page generation. Impact is user-side: potential credential/session data exposure through injected scripts. A...

CVE-2024-35714

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Theme Freesia Idyllic allows Stored XSS.This issue affects Idyllic: from n/a through 1.1.8...

CVE-2024-35718

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tribulant Newsletters allows Reflected XSS.This issue affects Newsletters: from n/a through 4.9.5...

CVE-2024-35713

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in UAPP GROUP Testimonial Carousel For Elementor allows Stored XSS.This issue affects Testimonial Carousel For Elementor: from n/a through 10.1.1...

CVE-2024-35704

CVE-2024-35704 describes a Stored XSS in BlockArt Blocks (WordPress) due to Improper Neutralization of Input During Web Page Generation. Affected: BlockArt Blocks versions n/a through 2.1.5. The Red Hat and Wordfence entries corroborate the vulnerability and indicate it is a Cross-Site Scripting ...

CVE-2024-35707

CVE-2024-35707 is an unauthenticated stored XSS in the WordPress plugin Heateor Social Login . The vulnerability affects the plugin family “Heateor Social Login” and is listed as affecting versions from n/a up to and including 1.1.32 . The issue is described as improper input neutralization durin...

CVE-2024-35719 WordPress RestroPress plugin <= 3.1.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MagniGenie RestroPress allows Stored XSS.This issue affects RestroPress: from n/a through 3.1.2.1...

CVE-2024-35719

CVE-2024-35719 is a stored XSS in RestroPress (WordPress) affecting versions up to 3.1.2.1. The vulnerability arises from improper neutralization of input during web page generation, enabling stored cross-site scripting when an authenticated user (Contributor+) submits crafted content. Publicly a...

CVE-2024-35738

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kognetiks Kognetiks Chatbot for WordPress allows Stored XSS.This issue affects Kognetiks Chatbot for WordPress: from n/a through 1.9.8...

CVE-2024-35734

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CodePeople WP Time Slots Booking Form allows Stored XSS.This issue affects WP Time Slots Booking Form: from n/a through 1.2.10...

CVE-2024-35734

CVE-2024-35734 is a stored XSS vulnerability in the WP Time Slots Booking Form WordPress plugin. The issue arises from improper input neutralization during web page generation and is exploitable via the plugin’s input (Stored XSS). Affected versions are WP Time Slots Booking Form 1.2.10 and earli...

CVE-2024-35737 WordPress WP Visitors Tracker plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Loopus WP Visitors Tracker allows Reflected XSS.This issue affects WP Visitors Tracker: from n/a through 2.3...

CVE-2024-35738

CVE-2024-35738 is a Stored XSS vulnerability in Kognetiks Chatbot for WordPress, affecting versions up to 1.9.8 (no public details beyond this; initial and Red Hat entries confirm the issue). No exploit vectors or remediation steps are provided in the supplied documents.

CVE-2024-35751 WordPress Woody code snippets plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Creative Motion, Will Bontrager Software, LLC Woody ad snippets allows Stored XSS.This issue affects Woody ad snippets: from n/a through 2.4.10...

CVE-2024-35756

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CeiKay Tooltip CK tooltip-ck allows Stored XSS.This issue affects Tooltip CK: from n/a through 2.2.15...

WordPress plugin Auto Coupons for WooCommerce cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress plugin WP Visitors Tracker Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...