CVE-2024-51808

CVE-2024-51808 describes a stored cross-site scripting (XSS) vulnerability in the WordPress plugin “codeSnips.” The issue arises from improper neutralization of input during web page generation, allowing injected scripts to be stored and potentially executed when other users load affected pages. ...

CVE-2024-51810

CVE-2024-51810 is a Stored XSS in WordPress plugin Lewe Bootstrap Visuals (up to version 2.2.2) caused by improper neutralization of input during web page generation. The vulnerability affects Lewe Bootstrap Visuals and can allow malicious scripts to be stored and later executed in a user’s brows...

CVE-2024-51819 WordPress Tigris Flexplatform plugin <=1.0.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tigrisflexplatform Tigris Flexplatform tigris-flexplatform allows Stored XSS.This issue affects Tigris Flexplatform: from n/a through = 1.0.2...

CVE-2024-51823

CVE-2024-51823 concerns the WordPress plugin Add Ribbon Shortcode (vulnerable up to 1.0.1) and describes a DOM‑Based XSS caused by improper input neutralization during web page generation. The description in the initial document states Cross-site Scripting for Add Ribbon Shortcode and lists affec...

CVE-2024-51825

CVE-2024-51825 is a WordPress Alert Me! plugin vulnerability (

CVE-2024-51830

CVE-2024-51830 is a stored XSS vulnerability in Fazilatunnesa News Ticker (WordPress News Ticker plugin). Exploitation requires an authenticated user (Contributor+); input is not properly neutralized during web page generation, enabling stored cross-site scripting. Affected versions are News Tick...

CVE-2024-51839

CVE-2024-51839 – Utech Spinning Earth WordPress plugin exhibits a DOM-based XSS due to improper input neutralization during web page generation. Affected: Utech Spinning Earth versions up to 1.2 (and earlier). Public details across sources consistently describe the issue as Cross-Site Scripting w...

CVE-2024-51853 WordPress Faltu Testimonial Rotator plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alberuni Azad. Faltu Testimonial Rotator faltu-testimonial-rotator allows DOM-Based XSS.This issue affects Faltu Testimonial Rotator: from n/a through = 1.0.0...

CVE-2024-51855

Productineer Redirecter is affected by DOM-Based XSS due to improper neutralization of input during web page generation. CVE-2024-51855 applies to Redirecter versions n/a through 1.0. Root cause: inadequate input sanitization in page rendering. Impact is DOM-based XSS as described in connected Re...

CVE-2024-51856

CVE-2024-51856 is an XSS vulnerability in the WP Moose Elementor Kit (WordPress plugin) where improper input handling during web page generation leads to a DOM-based cross-site scripting issue. Public sources concur this affects Moose Elementor Kit up to version 1.0.0 (and earlier), with exploita...

CVE-2024-51858

CVE-2024-51858 is a Stored XSS vulnerability in Umar Social Locker WordPress plugin (

CVE-2024-51860

CVE-2024-51860 is a stored cross-site scripting (XSS) vulnerability in the DuoGeek Custom Dashboard Widget for WordPress. The issue arises from improper neutralization of input during web page generation, allowing stored malicious input to be reflected in the widget’s output. Affected: Custom Das...

CVE-2024-51865

CVE-2024-51865 : The WordPress plugin Simple Social Share Block is affected by a Stored XSS due to improper input neutralization during page generation. Affected range is from a non-specified start through version 1.0.0. Public sources (Red Hat, CVE listings, and vulnerability databases) corrobor...

CVE-2024-51870

CVE-2024-51870 corresponds to a stored cross‑site scripting (XSS) vulnerability in the WordPress plugin “Ultimate Flipbox Addon for Elementor.” Affected: Ultimate Flipbox Addon for Elementor versions up to 1.0.4 (auth required). Root cause: improper neutralization of user input during web page ge...

CVE-2024-51869

CVE-2024-51869 is a stored XSS in the Gutenium Blocks WordPress plugin (vulnerable

CVE-2024-51873

CVE-2024-51873 is a DOM-based XSS vulnerability in the matorel Multi-day Booking Calendar WordPress plugin, affecting versions up to 1.0.1. The issue arises from improper input handling during web page generation, enabling cross-site scripting. Publicly disclosed details from multiple sources con...

CVE-2024-51878

CVE-2024-51878 affects AchillesTheme-shortcodes (WordPress plugin). Public details describe an improper input neutralization during web page generation leading to DOM-based XSS in versions up to 0.1. No patch information is provided in the connected documents; remediation status is not specified....

CVE-2024-51886 WordPress Posts Filter plugin <= 1.3.1 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Takashi Matsuyama Posts Filter posts-filter allows Stored XSS.This issue affects Posts Filter: from n/a through = 1.3.1...

CVE-2024-51887

CVE-2024-51887 – NV Slider (WordPress plugin) suffers Stored XSS due to improper input neutralization during page generation. Affected: NV Slider versions 1.6 and earlier. Root cause: improper handling of user-supplied input in web page rendering. Impact: stored cross-site scripting possibility o...

CVE-2024-51890

CVE-2024-51890 is a stored XSS vulnerability affecting the Geoportail Shortcode plugin for WordPress, with affected versions from n/a through 2.4.4. The issue is described as Improper Neutralization of Input During Web Page Generation. Public sources in connected documents confirm Geoportail Shor...