CVE-2024-30495

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Faboba Falang multilanguage.This issue affects Falang multilanguage: from n/a through 1.3.47...

CVE-2024-30494

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in 沈唁 OSS Aliyun.This issue affects OSS Aliyun: from n/a through 1.4.10...

CVE-2024-30490

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

CVE-2024-30490

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8...

CVE-2024-30430

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Email Newsletter Team - FluentCRM Fluent CRM allows Stored XSS.This issue affects Fluent CRM: from n/a through 2.8.44...

CVE-2024-30429

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hans Matzen allows Stored XSS.This issue affects wp-forecast: from n/a through 9.2...

CVE-2024-30426

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HashThemes Hash Elements allows Stored XSS.This issue affects Hash Elements: from n/a through 1.3.3...

CVE-2024-30428

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Reflected XSS.This issue affects Contest Gallery: from n/a through = 24.0.3...

CVE-2022-47153

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPJobBoard Jobeleon Theme allows Reflected XSS.This issue affects Jobeleon Theme: from n/a through 1.9.1...

CVE-2024-30425

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows DOM-Based XSS.This issue affects Beaver Builder: from n/a through = 2.7.4.4...

CVE-2024-30502

CVE-2024-30502 affects WP Travel Engine (WordPress) up to version 5.7.9, with an unauthenticated SQL Injection caused by improper neutralization of input in the plugin. This can lead to full confidentiality, integrity, and availability impact as indicated by CVSS scores (NVD: 9.8 CRITICAL; ATT&CK...

CVE-2024-30501

The CVE-2024-30501 entry concerns WPChill’s Download Monitor plugin (WordPress) up to version 4.9.4, where an improper neutralization of SQL elements causes an SQL Injection. The vulnerability affects the plugin’s admin-facing code and can impact confidentiality, integrity, and availability as de...

CVE-2024-30499

CVE-2024-30499 corresponds to the CRM Perks Forms SQL Injection in the WordPress plugin. The initial description states an improper neutralization of SQL commands affecting CRM Perks Forms versions from n/a up to 1.1.4. Connected sources confirm a critical, unauthenticated or possibly authenticat...

CVE-2024-30495

CVE-2024-30495 is a SQL Injection in Falang multilanguage for WordPress (Falang plugin) affecting versions up to 1.3.47. The issue is an SQL injection via improper neutralization of input in Falang’s language handling. The Red Hat/WordPress ecosystem records this as patched; mitigation is to appl...

CVE-2024-30488

CVE-2024-30488 is tied to the Zotpress WordPress plugin (Zotpress, affected: n/a through 7.3.7) and is characterized as an SQL Injection. The linked Red Hat/WordFence entries confirm the issue exists as an authenticated (Contributor+) SQL injection against Zotpress and note a patched status, indi...

CVE-2024-30486

CVE-2024-30486 is an authenticated SQL injection in the WordPress plugin Media Library Folders (Media Library Folders: 8.1.7 and earlier). The issue arises from improper neutralization of input in SQL commands, enabling an attacker with Author+ or higher permissions to manipulate queries. The vul...

CVE-2024-30430 WordPress FluentCRM plugin <= 2.8.44 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Email Newsletter Team - FluentCRM Fluent CRM allows Stored XSS.This issue affects Fluent CRM: from n/a through 2.8.44...

CVE-2024-30429

CVE-2024-30429 is a stored XSS in the WordPress plugin wp-forecast (Hans Matzen). The Red Hat CVE entry states: Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) allowing Stored XSS, affecting wp-forecast from n/a through 9.2. The coordinated description confirms ...

CVE-2024-30428

CVE-2024-30428 is described as a Reflected XSS in Contest Gallery, but the provided documents do not include concrete technical details (affected versions, root cause, or fix). Monitor for updates.

CVE-2024-30425

CVE-2024-30425 affects the WordPress Beaver Builder plugin (Beaver Builder) up to version 2.7.4.4. The issue is a stored cross-site scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. In practical terms, this means attacker-supplied input could be ...