CVE-2024-35709

CVE-2024-35709 is a Stored XSS vulnerability in WordPress The Plus Addons for Elementor Page Builder Lite (versions up to and including 5.5.4). The issue stems from improper input neutralization during web page generation, enabling stored XSS. Affected product: The Plus Addons for Elementor Page ...

CVE-2024-35711

CVE-2024-35711 describes a Stored XSS in Theme Freesia Event (WordPress) via Improper Neutralization of Input During Web Page Generation. Affects Event: from n/a through 1.2.2. Connected docs confirm the product and vulnerability class but do not provide a patch/version fix details. No exploit ve...

CVE-2024-35715

CVE-2024-35715: Stored XSS in Bloglo and Blogvi WordPress themes/plugins due to improper input neutralization during page generation. Affected: Bloglo up to 1.1.3; Blogvi up to 1.0.5. Root cause as described; no explicit exploitation details provided in the available documents. Patch/mitigation s...

CVE-2024-35718

CVE-2024-35718 is a Reflected XSS in the WordPress Newsletters plugin (Newsletters

CVE-2024-35719 WordPress RestroPress plugin <= 3.1.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MagniGenie RestroPress allows Stored XSS.This issue affects RestroPress: from n/a through 3.1.2.1...

CVE-2024-35719

CVE-2024-35719 is a stored XSS in RestroPress (WordPress) affecting versions up to 3.1.2.1. The vulnerability arises from improper neutralization of input during web page generation, enabling stored cross-site scripting when an authenticated user (Contributor+) submits crafted content. Publicly a...

CVE-2024-35752

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Enea Overclokk Stellissimo Text Box allows Stored XSS.This issue affects Stellissimo Text Box: from n/a through 1.1.4...

CVE-2024-35739

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through = 7.7.1...

CVE-2024-35738

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Kognetiks Kognetiks Chatbot for WordPress allows Stored XSS.This issue affects Kognetiks Chatbot for WordPress: from n/a through 1.9.8...

CVE-2024-35734

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CodePeople WP Time Slots Booking Form allows Stored XSS.This issue affects WP Time Slots Booking Form: from n/a through 1.2.10...

CVE-2024-35732

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YITHEMES YITH Custom Login yith-custom-login.This issue affects YITH Custom Login: from n/a through = 1.7.0...

CVE-2024-35733

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in RLDD Auto Coupons for WooCommerce allows Reflected XSS.This issue affects Auto Coupons for WooCommerce: from n/a through 3.0.14...

CVE-2024-35730

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in realmag777 Active Products Tables for WooCommerce allows Reflected XSS.This issue affects Active Products Tables for WooCommerce: from n/a through 1.0.6.3...

CVE-2024-35730 WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in realmag777 Active Products Tables for WooCommerce allows Reflected XSS.This issue affects Active Products Tables for WooCommerce: from n/a through 1.0.6.3...

CVE-2024-35734

CVE-2024-35734 is a stored XSS vulnerability in the WP Time Slots Booking Form WordPress plugin. The issue arises from improper input neutralization during web page generation and is exploitable via the plugin’s input (Stored XSS). Affected versions are WP Time Slots Booking Form 1.2.10 and earli...

CVE-2024-35737 WordPress WP Visitors Tracker plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Loopus WP Visitors Tracker allows Reflected XSS.This issue affects WP Visitors Tracker: from n/a through 2.3...

CVE-2024-35738

CVE-2024-35738 is a Stored XSS vulnerability in Kognetiks Chatbot for WordPress, affecting versions up to 1.9.8 (no public details beyond this; initial and Red Hat entries confirm the issue). No exploit vectors or remediation steps are provided in the supplied documents.

CVE-2024-35750

CVE-2024-35750 describes an SQL Injection in the wpdevart Responsive Image Gallery, Gallery Album plugin (vulnerable

CVE-2024-35751

Technical details for CVE-2024-35751 ( Woody code snippets plugin, affected version range, XSS impact, and fixes) are not provided in the supplied Connected Documents. Monitor for updates.

CVE-2024-35751 WordPress Woody code snippets plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Creative Motion, Will Bontrager Software, LLC Woody ad snippets allows Stored XSS.This issue affects Woody ad snippets: from n/a through 2.4.10...