CVE-2024-54246

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 FAQs faqs allows Stored XSS.This issue affects FAQs: from n/a through = 1.0.2...

CVE-2024-54244

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 Easy Replace easy-replace allows Stored XSS.This issue affects Easy Replace: from n/a through = 1.3...

CVE-2024-54346

CVE-2024-54346 affects the Barter WordPress theme (SKT Themes Barter). The issue is a DOM-based XSS caused by improper input neutralization during web page generation, affecting Barter up to version 1.6. The vulnerability is listed as active in public records and has a patch available (patched); ...

CVE-2024-54342 WordPress Staggs plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in STAGGS STAGGS staggs allows Reflected XSS.This issue affects STAGGS: from n/a through = 2.0.0...

CVE-2024-54340

CVE-2024-54340 is a reflected Cross‑Site Scripting vulnerability in the WordPress plugin Simple Presenter (Sylvia van Os Simple Presenter). Affected versions are listed as up to 1.5.1 (from n/a through 1.5.1). The issue arises from improper neutralization of input during web page generation, allo...

CVE-2024-54339 WordPress geoFlickr plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jbd7 geoFlickr allows Reflected XSS.This issue affects geoFlickr: from n/a through 1.3...

CVE-2024-54334 WordPress Quran Phrases About Most People Shortcodes plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zeshanb Quran Phrases About Most People Shortcodes quran-phrases-about-most-people-shortcodes allows DOM-Based XSS.This issue affects Quran Phrases About Most People Shortcodes: from n/a through =...

CVE-2024-54327

CVE-2024-54327 is a reflected cross-site scripting vulnerability in the UNIVERSAM product. The issue stems from improper input neutralization during web page generation, enabling an attacker to cause XSS when a user loads a crafted URL. According to the provided CVSS data, the baseline is CVSS v3...

CVE-2024-54327 WordPress UNIVERSAM plugin < 8.59 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in universam UNIVERSAM allows Reflected XSS.This issue affects UNIVERSAM: from n/a through n/a...

CVE-2024-54318

CVE-2024-54318 is a stored XSS in the NiceJob WordPress plugin (NiceJob) that affects versions up to 3.6.5. The issue arises from improper neutralization of input during web page generation, enabling stored Cross-Site Scripting. The Red Hat/Wordfence entries confirm the vulnerability and indicate...

CVE-2024-54302 WordPress VForm plugin <= 3.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vikas Ratudi VPSUForm v-form allows Reflected XSS.This issue affects VPSUForm: from n/a through = 3.0.0...

CVE-2024-54302

CVE-2024-54302 refers to a reflected XSS in VForm (Lifetime free Drag & Drop Contact Form Builder for WordPress). The issue arises from improper neutralization of user-supplied input during web page generation, enabling reflected cross-site scripting when a malicious payload is echoed back in res...

CVE-2024-54290 WordPress Role Includer plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Fletcher Role Includer role-includer allows Reflected XSS.This issue affects Role Includer: from n/a through = 1.6...

CVE-2024-54287 WordPress Advanced Blog Post Block plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Best WP Developer Advanced Blog Post Block advanced-blog-post-block allows Stored XSS.This issue affects Advanced Blog Post Block: from n/a through = 1.0.4...

CVE-2024-54276 WordPress Poll Builder plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Felix Moira Poll Builder allows Stored XSS.This issue affects Poll Builder: from n/a through 1.3.5...

CVE-2024-54274 WordPress Octrace Support plugin <= 1.2.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Octrace WordPress HelpDesk & Support Ticket System Plugin – Octrace Support octrace-support allows Reflected XSS.This issue affects WordPress HelpDesk & Support Ticket System Plugin – Octrace...

CVE-2024-54246

CVE-2024-54246 corresponds to a Cross-Site Scripting (Stored XSS) vulnerability in the WordPress FAQs plugin, affecting versions up to 1.0.2. The issue is described as improper neutralization of input during web page generation. The connected documents confirm the vulnerability exists in the FAQs...

CVE-2024-54235

CVE-2024-54235: Reflected Cross-Site Scripting in WordPress Shiptimize for WooCommerce (

CVE-2024-54235 WordPress Shiptimize for WooCommerce plugin <= 3.1.86 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shiptimize Shiptimize for WooCommerce shiptimize-for-woocommerce allows Reflected XSS.This issue affects Shiptimize for WooCommerce: from n/a through = 3.1.86...

WordPress plugin J&T Express Malaysia 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...