CVE-2024-47336

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows Stored XSS.This issue affects Terms descriptions: from n/a through = 3.4.7...

CVE-2024-47327

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Reflected XSS.This issue affects GEO my WordPress: from n/a through = 4.5.0.3...

CVE-2024-47326

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Share This Image share-this-image allows Reflected XSS.This issue affects Share This Image: from n/a through = 2.01...

CVE-2024-47327 WordPress GEO my WP plugin <= 4.5.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Reflected XSS.This issue affects GEO my WordPress: from n/a through = 4.5.0.3...

CVE-2024-47332

CVE-2024-47332 affects the WordPress Sky Addons for Elementor plugin, with stored XSS due to improper input neutralization during web page generation. Impact is limited to Sky Addons for Elementor versions up to 2.5.11 (patch released in 2.5.12). Remediation: update to 2.5.12 or later; patch deta...

CVE-2024-47333

CVE-2024-47333 affects WordPress plugin Loops & Logic (versions up to and including 4.1.4). The root cause is improper input neutralization during page generation, leading to a reflected XSS. The vulnerability score is CVSS 3.1 base 7.1 (HIGH) with network attack vector, no privileges required, u...

CVE-2024-47341

CVE-2024-47341: WP-DownloadManager

CVE-2024-47345

CVE-2024-47345 is a Cross-Site Scripting (XSS) vulnerability in the WordPress Starter Templates plugin (aka Starter Templates — Elementor, WordPress & Beaver Builder Templates) affecting versions up to 4.4.0. The issue arises from improper input neutralization during web page generation, enabling...

CVE-2024-47349

CVE-2024-47349 describes a Reflected Cross-Site Scripting (XSS) vulnerability in WordPress WPMobile.App (plugin), allowing unauthenticated attackers to trigger XSS via input during web page generation. Affected versions are listed as

CVE-2024-47349 WordPress WPMobile.App plugin <= 11.50 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Amauri WPMobile.App wpappninja.This issue affects WPMobile.App: from n/a through = 11.50...

CVE-2024-47366

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows Stored XSS.This issue affects Elementor Addon Elements: from n/a through = 1.13.6...

CVE-2024-47365

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atakan Au Automatically Hierarchic Categories in Menu automatically-hierarchic-categories-in-menu allows Stored XSS.This issue affects Automatically Hierarchic Categories in Menu: from n/a through ...

CVE-2024-47364

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in moveaddons Move Addons for Elementor move-addons allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through = 1.3.4...

CVE-2024-47363

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Blockspare Blockspare blockspare allows Stored XSS.This issue affects Blockspare: from n/a through = 3.2.4...

CVE-2024-47356

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in catchthemes Create create allows Stored XSS.This issue affects Create: from n/a through = 2.9.1...

CVE-2024-47357

CVE-2024-47357 affects the WordPress plugin Happy Addons for Elementor (versions

CVE-2024-47360

CVE-2024-47360 : WordPress BA Book Everything plugin (vulnerable:

CVE-2024-47364

CVE-2024-47364 is a stored Cross-Site Scripting vulnerability in Move Addons for Elementor for versions ≤ 1.3.4. Evidence from Patchstack and CVE entries shows that the issue affects this plugin, and a fix was released in version 1.3.5. Affected product: Move Addons for Elementor. Remediation: up...

CVE-2024-47367

CVE-2024-47367 affects YITH WooCommerce Product Add-Ons (versions

CVE-2024-47368

CVE-2024-47368: Stored XSS in WordPress Premium Blocks – Gutenberg Blocks for WordPress (LeapWorx) affecting Premium Blocks for Gutenberg until v2.1.33; root cause is improper neutralization of input during web page generation. CVSSv3.1 base score 6.5 (medium). Patch/mitigation: fixed in v2.1.34;...