CVE-2024-35688

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jewel Theme Master Addons for Elementor allows Stored XSS.This issue affects Master Addons for Elementor: from n/a through 2.0.5.9...

CVE-2024-35693

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list.This issue affects 12 Step Meeting List: from n/a through = 3.14.33...

CVE-2024-35687

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Yannick Lefebvre Link Library link-library allows Reflected XSS.This issue affects Link Library: from n/a through 7.6.3...

CVE-2024-35681

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in gVectors Team wpDiscuz allows Stored XSS.This issue affects wpDiscuz: from n/a through 7.6.18...

CVE-2024-35679

CVE-2024-35679 is a Reflected XSS in GiveWP (WordPress donation plugin) that affects GiveWP versions up to 3.12.0. The vulnerability is caused by improper input neutralization during web page generation, enabling reflected XSS. The entry indicates patch status as Patched (a fix is available in a ...

CVE-2024-35679 WordPress GiveWP plugin <= 3.12.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a through = 3.12.0...

CVE-2024-34765

CVE-2024-34765 is a Stored XSS in Sensei Pro (WC Paid Courses) for Sensei LMS, affecting Sensei Pro: from n/a through 4.23.1.1.23.1. Red Hat’s advisory reiterates the same description. The initial data indicates this requires updating Sensei Pro to a fixed version (4.23.1.1.23.1) to mitigate the ...

CVE-2024-35688

WordPress Master Addons for Elementor plugin ( 2.0.5.9, specifically fixed in 2.0.6.0. Patch sources (Patchstack) note low exploit likelihood; no exploitation details provided in the document set. References include Patchstack entries indicating vulnerability and fix. Monitor for updates as detai...

CVE-2024-35693

CVE-2024-35693 affects WordPress plugin “12 Step Meeting List” (versions

CVE-2024-35696

CVE-2024-35696 affects the WP Docs WordPress plugin. The vulnerability is a Cross-Site Scripting issue (Reflected XSS) in WP Docs, with exploitation possible via input reflected during web page generation. Impact is user-side: potential credential/session data exposure through injected scripts. A...

CVE-2024-35698 WordPress YITH WooCommerce Tab Manager plugin <= 1.35.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in YITH YITH WooCommerce Tab Manager allows Stored XSS.This issue affects YITH WooCommerce Tab Manager: from n/a through 1.35.0...

CVE-2024-35699

CVE-2024-35699 is a Stored XSS flaw in HT Feed (HasThemes) affecting HT Feed versions up to 1.2.8. The issue arises from improper input neutralization during web page generation, enabling authenticated users to inject scripts. Red Hat/ENISA Wordfence context confirms the vulnerability and notes a...

CVE-2024-35702

CVE-2024-35702 affects WordPress Master Addons for Elementor plugin (

CVE-2024-35713

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in UAPP GROUP Testimonial Carousel For Elementor allows Stored XSS.This issue affects Testimonial Carousel For Elementor: from n/a through 10.1.1...

CVE-2024-35718

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tribulant Newsletters allows Reflected XSS.This issue affects Newsletters: from n/a through 4.9.5...

CVE-2024-35714

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Theme Freesia Idyllic allows Stored XSS.This issue affects Idyllic: from n/a through 1.1.8...

CVE-2024-35709

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through = 5.5.4...

CVE-2024-35707

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Team Heateor Heateor Social Login allows Stored XSS.This issue affects Heateor Social Login: from n/a through 1.1.32...

CVE-2024-35703

The CVE-2024-35703 entry concerns WordPress plugin Sina Extension for Elementor (≤ 3.5.3). The vulnerability is an Improper Neutralization of Input During Web Page Generation (Stored XSS) in the Sina Extension for Elementor, allowing stored cross-site scripting. Affected component: the plugin’s i...

CVE-2024-35704

CVE-2024-35704 describes a Stored XSS in BlockArt Blocks (WordPress) due to Improper Neutralization of Input During Web Page Generation. Affected: BlockArt Blocks versions n/a through 2.1.5. The Red Hat and Wordfence entries corroborate the vulnerability and indicate it is a Cross-Site Scripting ...