CVE-2024-13630 News List <= 1.0 - Reflected XSS

The NewsTicker WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13628 WP Pricing Table <= 1.1 - Reflected XSS

The WP Pricing Table WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13630

The NewsTicker WordPress plugin (versions

CVE-2024-13628 WP Pricing Table <= 1.1 - Reflected XSS

The WP Pricing Table WordPress plugin through 1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13629

The pushBIZ WordPress plugin (versions prior to 1.1 ) is vulnerable to Reflected Cross-Site Scripting (XSS) due to a failure to properly sanitize and escape a parameter before it is outputted back onto the page. This security flaw could be exploited to target high-privilege users, such as adminis...

CVE-2024-13629 Pushbiz <= 1.0 - Reflected XSS

The pushBIZ WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13628

The WP Pricing Table WordPress plugin (version 1.1 and earlier ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to sanitise and escape a parameter before it is outputted back onto the page. An attacker can exploit this by crafting a malicious URL to execute ...

CVE-2024-13624 WPMovieLibrary <= 2.1.4.8 - Reflected XSS

The WPMovieLibrary WordPress plugin through 2.1.4.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13571

The Post Timeline WordPress plugin versions prior to 2.3.10 are vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the insufficient sanitization and escaping of a parameter before it is output back onto the page. This vulnerability could be leveraged to target high-privilege u...

CVE-2024-13624 WPMovieLibrary <= 2.1.4.8 - Reflected XSS

The WPMovieLibrary WordPress plugin through 2.1.4.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13624

The WPMovieLibrary WordPress plugin, in versions through 2.1.4.8 , is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The issue arises because the plugin fails to properly sanitize and escape the 'order' parameter on the import page before outputting it back to the user. Attackers can ...

CVE-2024-13571 Post Timeline < 2.3.10 - Reflected XSS

The Post Timeline WordPress plugin before 2.3.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12878 Custom Block Builder – Lazy Blocks < 3.8.3 - Reflected XSS

The Custom Block Builder WordPress plugin before 3.8.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12878

The Custom Block Builder WordPress plugin (also referred to as Lazy Blocks ) versions prior to 3.8.3 is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The root cause is the lack of proper sanitization and escaping of a parameter before it is outputted back in the page. This vulnerabil...

CVE-2024-12878 Custom Block Builder – Lazy Blocks < 3.8.3 - Reflected XSS

The Custom Block Builder WordPress plugin before 3.8.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12737 WP BASE Booking of Appointments, Services and Events < 5.0.0 - Reflected XSS

The WP BASE Booking of Appointments, Services and Events WordPress plugin before 5.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-12737

The WP BASE Booking of Appointments, Services and Events WordPress plugin versions prior to 5.0.0 is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is a failure to properly sanitise and escape a parameter before it is outputted back onto the page. An attacker can exploit this...

CVE-2024-12737 WP BASE Booking of Appointments, Services and Events < 5.0.0 - Reflected XSS

The WP BASE Booking of Appointments, Services and Events WordPress plugin before 5.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-10152

The Simple Certain Time to Show Content WordPress plugin versions prior to 1.3.1 is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the lack of proper sanitization and escaping of a parameter before it is outputted back to the page. Attackers can craft a malicious URL to ex...

CVE-2024-10152 Simple Certain Time to Show Content < 1.3.1 - Reflected XSS

The Simple Certain Time to Show Content WordPress plugin before 1.3.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...