5749 matches found
CVE-2024-29797
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Darko Grid Shortcodes allows Stored XSS.This issue affects Grid Shortcodes: from n/a through 1.1...
CVE-2024-29796
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hot Themes Hot Random Image allows Stored XSS.This issue affects Hot Random Image: from n/a through 1.8.1...
CVE-2024-29790
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Squirrly SEO Plugin by Squirrly SEO allows Reflected XSS.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.16...
CVE-2024-29790
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Squirrly SEO Plugin by Squirrly SEO allows Reflected XSS.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.16...
CVE-2024-29768
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Astra allows Stored XSS.This issue affects Astra: from n/a through 4.6.4...
CVE-2024-29761
Technical details about CVE-2024-29761 (WP Post Disclaimer stored XSS in 1.0.3) are not publicly provided in the connected documents. No affected versions, impact, or fixes are detailed here. Monitor for updates.
CVE-2024-29765
CVE-2024-29765 : Stored XSS in Aparat for WordPress (WordPress plugin) due to improper input neutralization during web page generation. Affected: Aparat for WordPress versions n/a–2.2.0. Evidence in connected docs confirms the issue and that 2.2.0 is the latest affected version in the entry; no e...
CVE-2024-29766 WordPress StreamWeasels Twitch Integration plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StreamWeasels StreamWeasels Twitch Integration allows Stored XSS.This issue affects StreamWeasels Twitch Integration: from n/a through 1.7.5...
CVE-2024-29766
CVE-2024-29766 is a Cross-site Scripting vulnerability in StreamWeasels Twitch Integration for WordPress, affecting StreamWeasels Twitch Integration: from n/a through 1.7.5. The root cause is improper neutralization of input during web page generation, enabling stored XSS. Impact is described as ...
CVE-2024-29767
CVE-2024-29767 is a reflected XSS in the Doneren met Mollie WordPress plugin (Doneren met Mollie) affecting versions from n/a up to 2.10.2. The CVE entry is corroborated by Red Hat's advisory describing improper input neutralization leading to Reflected XSS. CVSSv3.1 base score is 7.1 (HIGH) with...
CVE-2024-29791 WordPress Bulk NoIndex & NoFollow Toolkit plugin <= 2.01 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Reflected XSS.This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 2.01...
CVE-2024-29814
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CurrencyRate.Today Exchange Rates Widget allows Stored XSS.This issue affects Exchange Rates Widget: from n/a through 1.4.0...
CVE-2024-29807
CVE-2024-29807 is a Stored XSS vulnerability in the DearFlip DearFlip WordPress plugin (DearFlip). The issue arises from improper neutralization of input during web page generation, enabling attacker-supplied input to be stored and later executed in the context of the victim’s browser. Affected p...
CVE-2024-29812 WordPress ReviewX plugin <= 1.6.22 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ReviewX allows Stored XSS.This issue affects ReviewX: from n/a through 1.6.22...
CVE-2024-29818 WordPress WP Poll Maker plugin <= 3.1 - Authenticated Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Poll Maker & Voting Plugin Team InfoTheme WP Poll Maker allows Stored XSS.This issue affects WP Poll Maker: from n/a through 3.1...
CVE-2024-30178
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Simply Static Simply Static simply-static.This issue affects Simply Static: from n/a through = 3.1.3...
CVE-2024-29932
Technical details about CVE-2024-29932 are not publicly provided in the supplied documents. Monitor for official advisories and vendor patches to obtain affected products, vulnerable components, impact, and remediation when they become available.
CVE-2024-29930
CVE-2024-29930 affects the Crypto Converter Widget (WordPress plugin) up to v1.8.4, with a Stored XSS vulnerability via shortcode caused by improper input handling. The CVE entry is supported by connected data (Wordfence/Red Hat references) showing the issue and that a patch was issued.
CVE-2024-29928
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Codeus Advanced Sermons allows Reflected XSS.This issue affects Advanced Sermons: from n/a through 3.1...