CVE-2024-44036

CVE-2024-44036 is a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Kodex Posts likes (versions

CVE-2024-44037

CVE-2024-44037 is a stored XSS in the WordPress plugin Multipurpose Ticket Booking Manager (bus-booking-manager / WpTicketly) for versions up to and including 4.2.2 . The vulnerability arises from improper input neutralization during web page generation, enabling stored cross-site scripting via a...

CVE-2024-44039

CVE-2024-44039 affects WordPress WP Travel – Ultimate Travel Booking System, Tour Management Engine plugin versions up to 9.3.1. Root cause: Improper neutralization of input during web page generation, enabling Stored XSS. Impact is stored cross-site scripting in WP Travel pages (low to moderate ...

CVE-2024-44040

CVE-2024-44040 : WordPress plugin ShiftController Employee Shift Scheduling contains a stored XSS due to improper input neutralization during web page generation. Affected plugin versions:

CVE-2024-44043

CVE-2024-44043 is a stored XSS in WordPress plugin Photo Gallery by 10Web up to version 1.8.27 . The issue arises from improper input handling during web page generation. Patch data from Patchstack indicates the fix is in version 1.8.28 ; the vulnerability has a low patch priority and is consider...

CVE-2024-47297

CVE-2024-47297 : WordPress CP Polls plugin versions up to 1.0.74 are vulnerable to a reflected XSS due to improper input neutralization during web page generation. The CVSS v3.1 base score is 7.1 (HIGH). Patch information from Patchstack indicates the vulnerability is fixed in CP Polls 1.0.75. Af...

CVE-2024-47298

CVE-2024-47298 is a stored XSS in Bold Page Builder (WordPress plugin) up to version 5.1.1, caused by improper input neutralization during page generation. Affected versions are Bold Page Builder

CVE-2024-47306 WordPress Secure Copy Content Protection and Content Locking plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Copy Content Protection Team Secure Copy Content Protection and Content Locking allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking: from n/a through 4.2....

CVE-2024-47306

CVE-2024-47306 is a stored XSS vulnerability in the WordPress plugin Secure Copy Content Protection and Content Locking (versions

CVE-2024-47322

CVE-2024-47322 applies to WordPress WP Timeline – Vertical and Horizontal timeline plugin (

CVE-2024-47347

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Chartify chart-builder allows Reflected XSS.This issue affects Chartify: from n/a through = 2.7.6...

CVE-2024-47339

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JWardee WP Mail Catcher wp-mail-catcher allows Reflected XSS.This issue affects WP Mail Catcher: from n/a through = 2.1.9...

CVE-2024-47336

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows Stored XSS.This issue affects Terms descriptions: from n/a through = 3.4.7...

CVE-2024-47327

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Reflected XSS.This issue affects GEO my WordPress: from n/a through = 4.5.0.3...

CVE-2024-47326

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Share This Image share-this-image allows Reflected XSS.This issue affects Share This Image: from n/a through = 2.01...

CVE-2024-47327 WordPress GEO my WP plugin <= 4.5.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Reflected XSS.This issue affects GEO my WordPress: from n/a through = 4.5.0.3...

CVE-2024-47332

CVE-2024-47332 affects the WordPress Sky Addons for Elementor plugin, with stored XSS due to improper input neutralization during web page generation. Impact is limited to Sky Addons for Elementor versions up to 2.5.11 (patch released in 2.5.12). Remediation: update to 2.5.12 or later; patch deta...

CVE-2024-47333

CVE-2024-47333 affects WordPress plugin Loops & Logic (versions up to and including 4.1.4). The root cause is improper input neutralization during page generation, leading to a reflected XSS. The vulnerability score is CVSS 3.1 base 7.1 (HIGH) with network attack vector, no privileges required, u...

CVE-2024-47341

CVE-2024-47341: WP-DownloadManager

CVE-2024-47345

CVE-2024-47345 is a Cross-Site Scripting (XSS) vulnerability in the WordPress Starter Templates plugin (aka Starter Templates — Elementor, WordPress & Beaver Builder Templates) affecting versions up to 4.4.0. The issue arises from improper input neutralization during web page generation, enabling...