CVE-2024-51648

Cross-Site Request Forgery CSRF vulnerability in hands01 e-shops e-shops-cart2 allows Reflected XSS.This issue affects e-shops: from n/a through = 1.0.3...

CVE-2024-51637

Cross-Site Request Forgery CSRF vulnerability in sroyalty Admin SMS Alert admin-sms-alert allows Stored XSS.This issue affects Admin SMS Alert: from n/a through = 1.1.0...

CVE-2024-51686

CVE-2024-51686 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Manage User Columns, affecting versions up to 1.0.5. The issue enables CSRF against authenticated users. A fix exists (patched) and remediation is to update to the patched version or apply the vendor fix w...

CVE-2024-50534

CVE-2024-50534 – WordPress World Prayer Time plugin

CVE-2024-51635

CVE-2024-51635 is a CSRF-to-Stored-XSS vulnerability in the WordPress plugin While Loading (versions

CVE-2024-51637

CVE-2024-51637 : WordPress WordPress Admin SMS Alert plugin (versions

CVE-2024-51617

CVE-2024-51617 (Clyp WordPress plugin

CVE-2024-51836 WordPress Wezido plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in teconce Wezido wezido-elementor-addon-based-on-easy-digital-downloads allows DOM-Based XSS.This issue affects Wezido: from n/a through = 1.2...

CVE-2024-51851

CVE-2024-51851 is a cross-site scripting vulnerability in the WordPress plugin Best Bootstrap Widgets for Elementor (versions up to 1.0). The issue stems from improper input neutralization during web page generation, enabling DOM-based XSS. The connected sources indicate the plugin is affected up...

CVE-2024-51853 WordPress Faltu Testimonial Rotator plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alberuni Azad. Faltu Testimonial Rotator faltu-testimonial-rotator allows DOM-Based XSS.This issue affects Faltu Testimonial Rotator: from n/a through = 1.0.0...

CVE-2024-51863

CVE-2024-51863 : Stored XSS in WordPress PF Timer plugin (PF Timer,

CVE-2024-51864

CVE-2024-51864: WordPress Shortcode Collection plugin contains a Stored XSS due to improper input neutralization during page generation. Affected versions: Shortcode Collection

CVE-2024-51879

CVE-2024-51879 is a Stored XSS in the WordPress Text Advertisements plugin by Arash Heidari, affecting versions n/a through 2.1. The vulnerability arises from improper input neutralization during web page generation. CVSS 3.1 base score 6.5 (Medium); exploitation status not indicated in the provi...

CVE-2024-52416

Missing Authorization vulnerability in Eugen Bobrowski Debug Tool debug-tool allows Upload a Web Shell to a Web Server.This issue affects Debug Tool: from n/a through = 2.2...

CVE-2024-52415

Cross-Site Request Forgery CSRF vulnerability in skipstorm SK WP Settings Backup sk-wp-settings-backup allows Object Injection.This issue affects SK WP Settings Backup: from n/a through = 1.0...

CVE-2024-51584

CVE-2024-51584 affects the WordPress plugin Marquee Elementor with Posts, specifically versions 1.2.0 and earlier. The issue is DOM-based Cross-Site Scripting caused by improper neutralization of input during web page generation, enabling an attacker to inject script via the plugin’s rendering of...

CVE-2024-51595

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SKSDEV SKSDEV Toolkit sksdev-toolkit allows Stored XSS.This issue affects SKSDEV Toolkit: from n/a through = 1.0.0...

CVE-2024-51612

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designerken Reftagger Shortcode reftagger-shortcode allows Stored XSS.This issue affects Reftagger Shortcode: from n/a through = 1.1...

CVE-2024-51712

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Visser Jigoshop – Store Toolkit jigoshop-store-toolkit allows Reflected XSS.This issue affects Jigoshop – Store Toolkit: from n/a through = 1.4.0...

CVE-2024-51778 WordPress Satisfaction Reports from Help Scout plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tevya Satisfaction Reports from Help Scout happiness-reports-for-help-scout allows Reflected XSS.This issue affects Satisfaction Reports from Help Scout: from n/a through = 2.0.3...