CVE-2024-32544

CVE-2024-32544 (Netgsm WordPress Plugin) is a Reflected XSS vulnerability affecting Netgsm for WordPress up to version 2.8. The Netgsm plugin’s input is improperly neutralized during web page generation, enabling a reflected cross-site scripting attack. The connected sources list this as a fixed ...

CVE-2024-32548

CVE-2024-32548 describes an stored XSS in Hideki Tanaka’s What’s New Generator for WordPress. The vulnerability stems from improper neutralization of input during web page generation, allowing attacker-supplied input to be stored and subsequently rendered in pages viewed by other users. Affected ...

CVE-2024-32550

CVE-2024-32550 is described as a Cross-Site Request Forgery (CSRF) vulnerability in the BMI Adult & Kid Calculator WordPress plugin that allows Stored XSS. The vulnerability affects the BMI Adult & Kid Calculator plugin with versions up to 1.2.1. Public references in the connected documents (incl...

CVE-2024-32549

CVE-2024-32549 is a CSRF-to-XSS vulnerability in the WordPress plugin “Microkid Related Posts” that can affect sites using the plugin up to version 4.0.3. The connected Red Hat entry confirms the issue as a CSRF vulnerability that enables XSS in Related Posts for WordPress. The CVSS 3.1 vector fr...

CVE-2024-32506

Public details for CVE-2024-32506 are not provided in the connected documents. Technical specifics (affected plugin/version, root cause, exploitability) are not disclosed here. Monitor for updates from vendors/security advisories.

CVE-2024-32513

CVE-2024-32513 affects Product Feed PRO for WooCommerce (AdTribes) and corresponds to an Information Exposure via log files vulnerability. Public details show affected versions up to 13.3.1 (n/a to 13.3.1) with Patch Status as Patched; CVSS v3.1 base score 5.3 (Medium). Connected sources indicate...

CVE-2024-32514

CVE-2024-32514 is an Unrestricted Upload of File with Dangerous Type vulnerability in the WP Poll Maker plugin (Poll Maker – Best WordPress Poll Plugin for Voting Contest). The issue affects WP Poll Maker versions up to and including 3.4, with exploitation requiring at least Subscriber+ level acc...

CVE-2024-3834

Concrete details found: CVE-2024-3834 affects Google Chrome/Chromium, describing a Use-after-Free in the Downloads component that could enable heap corruption via a crafted HTML page. Affected versions are prior to 124.0.6367.60. The issue has been addressed in newer Chromium/Chrome updates (e.g....

CVE-2024-3833

CVE-2024-3833 is a Chrome/Chromium WebAssembly object-corruption vulnerability (via a crafted HTML page) tracked as high-severity, with reported fixes in Chromium 124.0.6367.60 and later (ChromeOS notes cite 124.0.6367.95; Debian security advisories list 124.0.6367.60 as the fixed version). Affec...

CVE-2024-32509

Technical details about CVE-2024-32509 (WP Cost Estimation & Payment Forms Builder) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2024-32516

CVE-2024-32516 — Missing Authorization in Palscode Multi Currency For WooCommerce (affects Multi Currency For WooCommerce: n/a–1.5.5). Public details in the initial report are limited to vendor/product reference and affected version range; no remediation, exploit vectors, or root-cause specifics ...

CVE-2024-32518

CVE-2024-32518 is a Missing Authorization vulnerability affecting PeproDev Ultimate Invoice (WordPress plugin). Public details indicate impact on PeproDev Ultimate Invoice versions up to 2.0.0. Red Hat and Wordfence entries corroborate the vulnerability and note it has been patched; specific fixe...

CVE-2024-32519

CVE-2024-32519: Technical details are not publicly provided in the connected documents. The initial description notes a Missing Authorization issue in GutenGeek GG Woo Feed for WooCommerce affecting up to version 1.2.6; no vendor/patch specifics are present in the supplied sources.

CVE-2024-32520

Technical details about CVE-2024-32520 are not publicly provided in the supplied documents. Please monitor for updates from official advisories or vendor/security databases for affected products, root cause, impact, and fixes.

CVE-2024-32522

CVE-2024-32522 describes a Missing Authorization vulnerability in the Open Close WooCommerce Store plugin by Jaed Mosharraf & Pluginbazar Team. The vulnerability affects the Open Close WooCommerce Store plugin version range from n/a up to 4.9.1, per the initial description and RH Red Hat entry wh...

CVE-2024-32524

Technical details about CVE-2024-32524 are not present in the provided documents. No affected version specifics, root cause, or fixes are disclosed here. Monitor for updates from vendor advisories and CVE databases.

CVE-2024-32525

Technical details for CVE-2024-32525 are not publicly provided in the supplied documents. The material only states a Missing Authorization issue in Theme My Login up to 7.1.6. Monitor for updates; no exploit/vector information is disclosed here.

CVE-2024-32532

CVE-2024-32532 is a Missing Authorization vulnerability in the SiteGround Speed Optimizer (WordPress SG CachePress plugin), affecting Speed Optimizer up to version 7.4.6. The connected RH entry and CVE record confirm a Missing Authorization issue, but the provided documents do not disclose the ex...

CVE-2024-22440

CVE-2024-22440 concerns the HPE Compute Scale-up Server 3200. PT- Security (PT-2024-19426) specifies affected versions: all prior to 1.10.342. The issue is a potential disclosure of sensitive information in log files. The guidance provides a remediation: upgrade firmware to version 1.10.342 or ne...

CVE-2024-32341

CVE-2024-32341 affects WonderCMS v3.4.3, specifically the Home page. The vulnerability is described as multiple XSS flaws that allow an attacker to inject arbitrary web scripts or HTML via crafted payloads into parameters, as noted across multiple sources. Some connected documents describe the im...